Legal
Cookies Policy.
The tracking tools we use, what they collect, how they are used, and how you can control them. Sits alongside our Privacy Policy.
Last updated August 2026
About this policy
This Cookies Policy explains the cookies, scripts, and similar technologies we use on www.ironsights.com.au, what they collect, why we use them, and how you can control them.
Tools we use
Our website uses the following third-party tools. Each is loaded only where it is required, and most are loaded only on the production site (not on staging or local development). The Google tags are consent-gated: they run cookielessly until you choose Accept All on the cookie banner.
- Google Analytics (Google LLC). Aggregate site-usage measurement. Helps us understand which pages are read and how visitors move through the site. Loaded only on the production site, and cookieless (no analytics cookies) until you choose Accept All. You can install the Google Analytics opt-out browser add-on to prevent collection.
- Google Ads (Google LLC). Conversion measurement for our advertising campaigns and, for visitors who arrive from an ad, call tracking that swaps our phone number for a Google forwarding number. Remarketing and advertising cookies (names starting with _gcl) are set only after you choose Accept All; until then the tag sends cookieless, aggregated signals. Loaded only on the production site.
- Google Tag Manager (Google LLC). A tag-management container used on our dedicated campaign landing pages to run the Google tags above. It honours the same consent state.
- Microsoft Clarity (Microsoft Corporation). Session-level behavioural insights such as scroll depth and click patterns, used to identify usability problems. Loads only on the production site, and only after you choose Accept All on the cookie banner. View the cookies Clarity sets.
- Vercel Analytics and Vercel Speed Insights (Vercel Inc.). Performance and Core Web Vitals measurement. Cookieless. No personally identifying information is collected.
- Cloudflare Turnstile (Cloudflare, Inc.), where enabled. A privacy-preserving alternative to traditional CAPTCHA. Cloudflare may set technical cookies to verify the challenge token. Turnstile does not track visitors between sites.
We review the tools we use periodically and update this list when they change.
Abuse and security signals
When you submit a form on our website, we record the IP address and user agent string from the request headers. This is not a cookie, but it is request-time data worth being transparent about.
These signals are used solely to detect and respond to abuse: applying per-IP rate limits, identifying patterns of automated submission, and following up on attempted attacks against the website. They are never used for marketing, and they are not shared with third parties except as required by law.
Local storage and the Essential Eight self-assessment
Local-storage entries used by the assessment are namespaced under "ironsights.e8.v1" and can be removed at any time by clearing your browser's storage for our site.
The website stores a few other first-party values in your browser, none of which are shared with third parties: "ironsights.consent.v1" (local storage) records your cookie banner choice for 12 months, "ironsights.consent.dismissed" (session storage) remembers that you closed the banner for the rest of the visit, "is_journey" (session storage) keeps the list of pages you viewed this visit so that an enquiry you submit reaches us with its context, and "is_lp_attribution" (local storage) records which campaign brought you to our landing pages so a later enquiry is attributed correctly.
If you choose to submit the optional "email me the report" form at the end of the assessment, that submission and the resulting email dispatch are governed by the Privacy Policy.
What we don't use
Many websites in our industry load a stack of advertising and social-media tracking pixels by default. We keep that list short, and the trackers we do use stay cookieless until you opt in.
Specifically, our website does not load or use:
- Meta Pixel (Facebook, Instagram)
- LinkedIn Insight Tag
- X (Twitter) tracking pixels
- TikTok pixels
- Third-party advertising networks
The trackers we do use are consent-gated: the cookie banner appears on your first visit, and nothing beyond strictly necessary storage is set until you choose Accept All. If we ever add a tracker that materially changes this position, we will update this policy first.
How to manage cookies
You have several layers of control over cookies and trackers on our website:
- The cookie consent banner. Choose Accept All or Essential Only when you first visit. You can change your mind at any time with the button below; switching to Essential Only also removes the tracking cookies we can reach.
- Your browser settings. Every major browser lets you block all cookies, block third-party cookies, or clear cookies on close. The exact location varies by browser; search for "cookies" in your browser's settings.
- Provider-level opt-outs. Google offers a dedicated analytics opt-out (linked above). Microsoft Clarity stops collecting if your browser sends a Do Not Track signal.
- Local storage. The Essential Eight self-assessment's stored answers can be cleared from your browser's storage settings.
Blocking cookies may affect some site features, but it will not prevent you from reading our content, contacting us, or completing the Essential Eight self-assessment.
The cookie banner is the primary control, and your choice applies immediately. Browser-level blocking remains a good backstop, and it is the only way to clear cookies set by third-party domains, which we cannot delete from our side.
Changes to this policy
We may update this policy when we change the tools we use, or in response to legal or regulatory changes. The "Last updated" date below indicates when the most recent change took effect. Material changes will be highlighted on the website. We encourage you to review this policy periodically.
How to contact us
Questions
About what runs on the page?
Our Privacy Officer can walk you through it.