Cookie Policy

1. What Are Cookies?

Cookies are small text files stored on your device when you browse a website. They help websites function properly, improve user experience, and provide analytical insights.

This policy also covers similar technologies that do the same job without using a cookie file, including browser local storage, session storage, and pixel or beacon requests. Where this policy says "cookies", it means all of these.

Cookies may be:

• Session cookies, deleted when you close your browser
• Persistent cookies, remain on your device until they expire or you delete them
• First-party cookies, placed by rConfig
• Third-party cookies, placed by third-party service providers

2. How We Use Cookies

We use cookies to:

• Ensure the Website functions correctly
• Improve security and block automated abuse
• Analyse site usage and performance
• Diagnose errors reported by your browser
• Remember your preferences, such as banners you dismiss

We do not use cookies for advertising, remarketing, or behavioural ad targeting, and we do not sell or share the data they generate with advertising networks.

3. Categories of Cookies We Use

3.1 Strictly Necessary (Always Active)

These are essential for the Website to operate and cannot be switched off. They are used for:

• Security, bot protection, and session management
• Page navigation and basic functionality
• Load balancing and performance stability
• Recording your own cookie choice, so we can honour it

Because they are required for the Website to function, no consent is required for these cookies.

3.2 Analytics and Performance (Consent Required)

Analytics cookies help us understand how visitors interact with the Website so we can improve usability, performance, and content. When you accept them, the following is collected:

• Pages viewed, time on page, and the order you view them
• Clicks, scroll depth, and other interactions with a page
• Browser, operating system, device type, and screen size
• Approximate location, derived from your IP address at city level
• The site or search engine that referred you
• JavaScript errors your browser encounters, including the page address and a technical stack trace

Analytics providers assign you a pseudonymous identifier so repeat visits can be counted as one visitor. We do not use that identifier to build a profile of you, and we do not attempt to link it to your name or email address unless you have separately given us those details and consented to that use.

3.3 Functional Storage

We store a small number of preferences in your browser's local storage rather than in cookies. These never leave your device and are not shared with any third party. They include:

• Your light or dark display preference
• Which announcement banners or notices you have already dismissed

You can clear these at any time through your browser's site data controls.

4. Third-Party Providers We Use

The providers below process data on our behalf under GDPR-compliant data processing terms. Everything marked "consent required" stays dormant until you accept on the cookie banner.

PostHog analytics requests are routed through our own domain (r.rconfig.com) so they are served first party. The data is still processed by PostHog as our provider, and it is held in PostHog's European Union region.

Transfers to Google and Microsoft in the United States rely on the EU-US Data Privacy Framework together with the standard contractual clauses in their data processing terms.

5. Cookies Set on the Website

Retention periods are the maximum set by each provider. Cookie names that include a bracketed value carry an identifier for our account with that provider.

Analytics providers also use your browser's local storage alongside these cookies, for the same purposes and under the same consent.

6. Session Replay and Heatmaps

Where session replay is enabled, our analytics providers record a reconstruction of your visit: the pages you saw, your mouse movement, scrolling, and clicks. This is used to find usability problems and to diagnose faults. Heatmaps aggregate the same click and scroll data across many visitors.

These recordings are not video and they do not use your camera or microphone. Text you type into form fields is masked by default and is not captured, and we do not switch that masking off.

Session replay runs only with your consent, and declining on the banner prevents it entirely.

7. Your Choices and Managing Cookies

7.1 Consent Banner

On your first visit you will see a cookie banner with two options:

• Accept, which allows the analytics and performance cookies described in section 3.2
• Decline, which allows only strictly necessary cookies

Declining costs you nothing. The Website works identically either way, and we record your decision so you are not asked again on every page.

7.2 Browser Settings

Independently of our banner, most browsers allow you to:

• Block cookies
• Delete cookies and other site data
• Block third-party cookies

Instructions can be found in your browser's help menu. Blocking strictly necessary cookies may affect how the Website functions.

8. How to Withdraw Consent

Select Cookie preferences in the footer of any page. That clears your stored choice, stops analytics collection immediately, and brings the banner back so you can decide again. You can also clear cookies for this site in your browser, which has the same effect.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

9. Updates to This Policy

We may update this Cookie Policy from time to time, for example when we add or remove a provider. Changes will be posted on this page with an updated "Last Updated" date.

10. Contact Us

If you have any questions about this Cookie Policy or how cookies are used on our Website, please contact us through the form on the Website.

11. Data Processing Agreement (DPA)

For detailed information on how we handle your data in compliance with GDPR, please refer to our Data Processing Agreement (DPA) located in our Data Processing Agreement.