Cookie policy
Cookies support secure forms, staff sign-in and Cloudflare security checks. Cloudflare also measures aggregate website performance without analytics cookies. This site has no advertising trackers.
This page lists every cookie this website sets and explains why you have not been shown a cookie banner. Last updated 31 October 2026.
Security and performance services
Cloudflare protects the connection to this site and checks for automated abuse. Its Web
Analytics script loads from static.cloudflareinsights.com and reports aggregate
performance information through this domain's /cdn-cgi/rum endpoint. It does
not use analytics cookies, browser storage or cross-site visitor tracking.
There is no Google Analytics, Google Tag Manager, Facebook or Meta pixel, advertising tag, heatmap, session-recording tool, embedded map or embedded video. The site's own stylesheet and application script are served from this domain.
The cookies that are set
The application uses these cookies for secure forms and staff access.
csrftoken
- What it does: proves that a form submission came from this website and not from a different site acting in your name. It is a security measure, and it is the reason nobody can make your browser send me a plumbing enquiry without you knowing.
- Set when: you load any page with a form on it.
- Contains: a random token. No name, no number, nothing about you.
- Lifetime: up to one year, or until you clear your browser data.
- First or third party: first party. It never leaves this domain.
sessionid
- What it does: keeps me logged in to the admin console where I read enquiries.
- Set when: only when someone signs in at the staff login. As an ordinary visitor you will never receive this cookie.
- Contains: a random session identifier.
- Lifetime: two weeks, or until sign-out.
- First or third party: first party.
Cloudflare security cookies
Depending on the checks applied to a visit, Cloudflare may set cookies such as
cf_clearance to remember a completed security check and __cf_bm
to help distinguish automated traffic. They are separate from Django's cookies and are
used for security rather than advertising. Their presence and lifetime depend on the
active Cloudflare security settings.
Other storage on your device
The application does not save your form entries in browser local storage. An earlier version did; the site now clears those old saved entries. Cloudflare's security scripts may separately use browser storage while evaluating a security check.
If you want to block them anyway
You can. Every browser lets you block or delete cookies for a specific site, usually under
Settings, then Privacy. Blocking csrftoken will stop the enquiry forms working,
because the server will not be able to tell a genuine submission from a forged one. Everything
else in the application — the public pages, phone number and WhatsApp links —
does not require Django cookies. Blocking Cloudflare's security cookies or scripts may
cause repeated security challenges or prevent access.
If this ever changes
This page will be updated before additional tracking or embedded third-party services are introduced. Where consent is required, a genuine choice will be provided first.
Questions
- Email: [email protected]
- Phone: +91 78489 89792
Privacy notice · Terms of service · Cancellations & refunds · Contact