Data on This Site

1. Who runs this origin

vikataylor.com is operated by Vika Taylor, an independent designer and creator. Contact: vika.taylor.one@gmail.com.

2. What this origin stores on your device

• vt_consent (localStorage, not a cookie): your banner choice, when you made it and the version of the privacy policy you answered, as {choice:'granted'|'denied', ts:<epoch ms>, v:'2026-09-17'}. Kept for 180 days, or until that policy changes in a way that needs a new answer; then you are asked again. It is stored whichever way you answer, because remembering "no" is the only way to honour it.
• cfz_google-analytics_v4, cfzs_google-analytics_v4 and cf_zaraz_client (cookies set by Cloudflare Zaraz, which runs Google Analytics for this site): set only after you press Accept, never before. The first holds the random analytics ID and lasts a year, the second counts page views in the current session, and the third is Zaraz's own working cookie and lasts a year. They are set for vikataylor.com, so every site in the network shares them, and they are HttpOnly, so no script on a page can read or delete them. While your choice here is Decline, this site does not run Zaraz, so nothing here reads them.
• _zaraz_google_consent_update (localStorage): written by Zaraz after you press Accept. It holds the consent state passed to Google, analytics allowed and advertising not, and no identifier. This site's script deletes it if you decline.
• Leftovers from the earlier set-up, until September 2026: the cookies _ga, _ga_*, _gid and _gat* and the storage entry _gcl_ls. This site's script deletes any it finds.

That is the whole inventory for this origin. There is nothing else in localStorage, no sessionStorage and no cookie set by this site's own code.

3. Who this origin talks to

• Cloudflare (Cloudflare, Inc., USA): the host. Asking for any page gives Cloudflare your IP address and the usual request metadata, because that is how the page reaches you.
• Cloudflare Zaraz and Google Analytics 4 (Cloudflare, Inc. and Google LLC, USA): only after Accept. Pressing Accept makes this site's own /consent.js start Zaraz, which is served from this site under /cdn-cgi/zaraz/ and runs Google Analytics on Cloudflare's servers, so your browser makes no request to Google. Zaraz tells Cloudflare the page address and title, the referring page, your screen and window size, colour depth, character set and time-zone offset. Cloudflare's servers pass Google the page view, this site's events, your browser's user-agent, your IP address and a random ID kept in a cookie, with the signal that analytics is allowed and advertising is not. Google uses the IP address to estimate an approximate location and states that Google Analytics 4 does not log or store IP addresses. Cloudflare acts as a processor, as it does for the hosting. Before Accept, and after Decline, this site sends nothing to Zaraz.
• Nobody else, before or after. Fonts are served from this origin, so no request goes to Google merely to render type. There is no CDN, no embedded video, no social widget and no third-party script of any other kind on these pages. Links to YouTube are ordinary outbound links: nothing loads from YouTube until you follow one.

4. The "Email me" box on the home page

It has no backend. Pressing the button opens your own email app with a message pre-filled to vika.taylor.one@gmail.com; nothing is sent to a server here and nothing is stored on this site. If you do write, your message sits in my mailbox and is used only to reply to you, including the launch note if that is what you asked for. It is never added to a mailing list and never loaded into a sending tool. Ask me to delete it and it is deleted.

5. Changing your mind

You can change or withdraw your choice at any time with the Cookie settings button, here or in the footer of every page. Withdrawing is exactly as easy as giving consent, which is the point.

What pressing Decline actually does, so the promise above is checkable rather than decorative. If analytics was never switched on, nothing runs and there is nothing to stop. If you had pressed Accept earlier, the moment you press Decline, on that page and without a reload, the page stops sending anything to Zaraz and deletes the _zaraz_ entry, and from your next page here Zaraz does not start at all.

Two limits, stated rather than papered over: measurements already sent before you changed your mind are in Google's systems and cannot be recalled from here, and the Zaraz cookies are HttpOnly, so no page can delete them; they stay until they expire or you clear them, and nothing here reads them while your choice is Decline. Clearing cookies and site data for vikataylor.com in your browser removes vt_consent and everything else that is left.

6. Your rights, and the full documents

Access, correction, deletion, objection, withdrawal of consent, portability and the right to complain to your data-protection authority are set out in full, with the legal bases and the regional sections, in the network privacy policy:

• Privacy Policy: what is processed, why, on what basis, and how to exercise your rights.
• Cookies and Local Storage: the complete inventory across all the sites, and how the banner works.
• Terms of Use: what you may do with the prompts, code and text published here.

To exercise a right, or to ask anything at all, email vika.taylor.one@gmail.com.