Cookie and Analytics Notice

Draft for counsel review. This notice lists what The Exchange actually stores on your device and what it sends, as checked in a browser on November 1, 2026. It has not been reviewed by a lawyer.

What runs before you choose

Nothing optional. In a browser check on November 1, 2026, browsing the public pages while signed out and before making a choice set no cookie, stored nothing on the device and made no analytics request. Necessary storage happens only when you act: making a privacy choice stores that choice, signing in sets sign-in cookies, and ticking "Save a draft on this device" stores a draft. Every page, font, script and style comes from The Exchange's own address. There are no advertising, social media or third-party trackers, no embedded maps or videos from other sites, and no fonts loaded from other sites.

Cookies

• exchange_privacy. Remembers your analytics choice: only the choice and its date, with no identifier. Necessary. Kept up to 182 days.
• wordpress_logged_in_(site code), wordpress_sec_(site code) and wordpress_test_cookie. Keep partners and staff signed in. Set only when you sign in. Necessary. Kept until you sign out, or up to 14 days.

Storage on your device

• exchange:draft:(listing), in local storage. A draft of your application, only if you tick "Save a draft on this device". Files and consents are never saved. Your choice. Kept until you untick the box, submit, or clear your browser.

Optional analytics

Off until you allow it. It is also off for everyone while VibeSociety has it switched off. When allowed, the browser tells The Exchange's own server which page you opened, what you searched for, which filters you used and which application step you reached. Nothing is sent to another company. No cookie is used for it. Visitors are counted with a code calculated with a secret that is replaced every day, so the same visitor normally gets a different code each day.

Your choice. Use the band at the top of the page, or Privacy choices at any time, to allow, refuse or withdraw. Withdrawing stops counting from the next page you open. Global Privacy Control is honored as a refusal, and allowing analytics does not override it. If the choice is missing, damaged or older than 182 days, nothing optional runs until you choose again.