IronSights

Legal

Cookies Policy.

The tracking tools we use, what they collect, how they are used, and how you can control them. Sits alongside our Privacy Policy.

Last updated August 2026

About this policy

This Cookies Policy explains the cookies, scripts, and similar technologies we use on www.ironsights.com.au, what they collect, why we use them, and how you can control them.

This policy sits alongside our Privacy Policy, which describes how IronSights handles personal information more broadly. Where the two policies overlap, the Privacy Policy takes precedence.

What cookies and trackers are

A cookie is a small text file that a website stores in your browser. Cookies are used to remember preferences, keep you signed in, measure how a site is used, and detect abuse.

When this policy refers to "cookies", we also mean closely related technologies: scripts that record analytics events, the browser's local storage (used by the Essential Eight self-assessment to save your progress on your device), and information about your request that any website naturally sees (such as your IP address and user agent string).

Most cookies are either strictly necessary for the website to function, or used to help us understand how the site is performing in aggregate. Cookies that support advertising measurement are set only if you choose Accept All on our cookie banner. Until then, our tracking tags run in a cookieless mode that stores nothing on your device.

Tools we use

Our website uses the following third-party tools. Each is loaded only where it is required, and most are loaded only on the production site (not on staging or local development). The Google tags are consent-gated: they run cookielessly until you choose Accept All on the cookie banner.

  • Google Analytics (Google LLC). Aggregate site-usage measurement. Helps us understand which pages are read and how visitors move through the site. Loaded only on the production site, and cookieless (no analytics cookies) until you choose Accept All. You can install the Google Analytics opt-out browser add-on to prevent collection.
  • Google Ads (Google LLC). Conversion measurement for our advertising campaigns and, for visitors who arrive from an ad, call tracking that swaps our phone number for a Google forwarding number. Remarketing and advertising cookies (names starting with _gcl) are set only after you choose Accept All; until then the tag sends cookieless, aggregated signals. Loaded only on the production site.
  • Google Tag Manager (Google LLC). A tag-management container used on our dedicated campaign landing pages to run the Google tags above. It honours the same consent state.
  • Microsoft Clarity (Microsoft Corporation). Session-level behavioural insights such as scroll depth and click patterns, used to identify usability problems. Loads only on the production site, and only after you choose Accept All on the cookie banner. View the cookies Clarity sets.
  • Vercel Analytics and Vercel Speed Insights (Vercel Inc.). Performance and Core Web Vitals measurement. Cookieless. No personally identifying information is collected.
  • Cloudflare Turnstile (Cloudflare, Inc.), where enabled. A privacy-preserving alternative to traditional CAPTCHA. Cloudflare may set technical cookies to verify the challenge token. Turnstile does not track visitors between sites.

We review the tools we use periodically and update this list when they change.

Abuse and security signals

When you submit a form on our website, we record the IP address and user agent string from the request headers. This is not a cookie, but it is request-time data worth being transparent about.

These signals are used solely to detect and respond to abuse: applying per-IP rate limits, identifying patterns of automated submission, and following up on attempted attacks against the website. They are never used for marketing, and they are not shared with third parties except as required by law.

Local storage and the Essential Eight self-assessment

Our Essential Eight self-assessment uses your browser's local storage (a sibling of cookies) to save your progress as you complete the assessment. This means your answers stay on your device by default. They are never sent to IronSights, our servers, or any third party.

Local-storage entries used by the assessment are namespaced under "ironsights.e8.v1" and can be removed at any time by clearing your browser's storage for our site.

The website stores a few other first-party values in your browser, none of which are shared with third parties: "ironsights.consent.v1" (local storage) records your cookie banner choice for 12 months, "ironsights.consent.dismissed" (session storage) remembers that you closed the banner for the rest of the visit, "is_journey" (session storage) keeps the list of pages you viewed this visit so that an enquiry you submit reaches us with its context, and "is_lp_attribution" (local storage) records which campaign brought you to our landing pages so a later enquiry is attributed correctly.

If you choose to submit the optional "email me the report" form at the end of the assessment, that submission and the resulting email dispatch are governed by the Privacy Policy.

What we don't use

Many websites in our industry load a stack of advertising and social-media tracking pixels by default. We keep that list short, and the trackers we do use stay cookieless until you opt in.

Specifically, our website does not load or use:

  • Meta Pixel (Facebook, Instagram)
  • LinkedIn Insight Tag
  • X (Twitter) tracking pixels
  • TikTok pixels
  • Third-party advertising networks

The trackers we do use are consent-gated: the cookie banner appears on your first visit, and nothing beyond strictly necessary storage is set until you choose Accept All. If we ever add a tracker that materially changes this position, we will update this policy first.

How to manage cookies

You have several layers of control over cookies and trackers on our website:

  • The cookie consent banner. Choose Accept All or Essential Only when you first visit. You can change your mind at any time with the button below; switching to Essential Only also removes the tracking cookies we can reach.
  • Your browser settings. Every major browser lets you block all cookies, block third-party cookies, or clear cookies on close. The exact location varies by browser; search for "cookies" in your browser's settings.
  • Provider-level opt-outs. Google offers a dedicated analytics opt-out (linked above). Microsoft Clarity stops collecting if your browser sends a Do Not Track signal.
  • Local storage. The Essential Eight self-assessment's stored answers can be cleared from your browser's storage settings.

Blocking cookies may affect some site features, but it will not prevent you from reading our content, contacting us, or completing the Essential Eight self-assessment.

The cookie banner is the primary control, and your choice applies immediately. Browser-level blocking remains a good backstop, and it is the only way to clear cookies set by third-party domains, which we cannot delete from our side.

Changes to this policy

We may update this policy when we change the tools we use, or in response to legal or regulatory changes. The "Last updated" date below indicates when the most recent change took effect. Material changes will be highlighted on the website. We encourage you to review this policy periodically.

How to contact us

If you have any questions about this policy, contact our Privacy Officer at privacy@ironsights.com.au. You can also call us on 1300 004 766.

Questions

About what runs on the page?

Our Privacy Officer can walk you through it.

privacy@ironsights.com.au1300 004 766Read the Privacy Policy