Cookie Options

Privacy

Cookie Options is a product of Leonico Ltd. This page says what we store and how to ask about it. It is not legal advice. We are not solicitors.

Who we are

Leonico Ltd runs Cookie Options.

Leonico Ltd is a company registered in Scotland in the United Kingdom, company number SC255241. Data Protection Act registration No. ZB331793.

Centrum House, 38 Queen Street, Glasgow G1 3DX.

Registered office: Suite 4.6 Turnberry House, 175 West George Street, Glasgow, Scotland, G2 2LB.

Account data

If you request access we store your name, email address, a hashed password, and the short note you send. Staff can see every account and every site on this installation.

Consent logs

When a visitor on a customer website saves a cookie choice, the public logger may store the site id, a daily session hash, the consent JSON, the page URL, a daily IP hash, a user-agent hash, the banner version, the banner language, and a short browser language tag from the visitor's browser.

A visit outside the UK and EEA opt-in region that sends Global Privacy Control is stored the same way: analytics and marketing off, necessary on, functional on when that category exists, and a gpc flag in the consent JSON. No extra personal data is stored for that signal. Inside the opt-in region the banner is unchanged and Global Privacy Control is not applied.

We do not store the raw IP address, the raw user agent, cookie values, or the Accept-Language header. The banner can send a reason with that request. The logger accepts the field and does not store it.

The site owner, or staff, can download the hashed log for that site as CSV from manage-site.

Cookies on cookieoptions.com

This website uses the Cookie Options banner. Necessary banner storage sits in localStorage. The names start with stcm. or co_consent_last_log_.

Vendors in use on this website:

  • Cookie Options, for the banner and your consent choice.
  • Bunny CDN, at cdn.cookieoptions.com, for the loader, CSS, JavaScript, icons and site-config.
  • Google Tag Manager, container GTM-5FLD4273. Analytics and marketing tags in that container run only after you allow those categories.
  • Meta Pixel, which may run from that container after you allow marketing. We do not publish a pixel ID here.

On a customer website the same banner keys sit in the visitor's browser on that site. Leonico does not receive those cookie values. A customer preference list shows that site's scan inventory, not this marketing list.

We follow ICO cookie guidance on re-prompting after about six months. The blocking banner stays away for about six months after a stored choice. Cookie settings still opens preferences at any time.

Website scan

When you add a site, Cookie Options fetches the public HTTPS homepage HTML and matches tracker strings.

From manage-site, a signed-in owner or staff member can scan internal pages on that website only. Other hosts are not fetched. That scan reads HTML. It does not run JavaScript.

Scan after JavaScript, the Deep Scan on manage-site, loads the homepage in Chrome so cookies set by scripts can appear. On the pages it opens it also records local storage and session storage key names, and how long each value is. It does not record the values.

Results are stored in the scan table, the cookie inventory, and the browser storage inventory for that site.

Your rights

UK GDPR gives you rights over personal data we hold. You can ask to see it, correct it, delete it, restrict our use of it, object to our use of it, or have a copy you can take elsewhere. You can also complain to the ICO.

Write to Leonico Ltd at Centrum House or at the registered office, or send a message on the contact page. If you have a Cookie Options account you can still use the email address on that account.

What this product is not

Cookie Options v1 does not sell IAB TCF. It is not an ICO-certified or Google-certified consent tool.

Using Cookie Options does not make a customer website ICO-compliant. This page is not legal advice.