Expression Cookie Policy
Effective date: 2026-10-20
1. What this policy covers
This policy explains which cookies and similar tools www.expressiontarot.com uses, why, and how to change your choice. It is part of our Privacy Policy, which says how we handle personal data more widely. The website is run by Glaring Services Ltd (company number 15337798, registered in England and Wales; registered office 86-90 Paul Street, London EC2A 4NE, United Kingdom). Contact: support@expressiontarot.com.
“Cookies” here also means similar tools that store or read information on your device, such as local storage.
This policy covers the website only. The Expression app uses its own settings; see the Privacy Policy.
2. The three classes
We sort everything we use into three classes. You choose each of the last two.
| Class | What it is for | Your choice |
|---|---|---|
| Strictly necessary | Making the site work and remembering your choices | Always on. You can block it in your browser, but the site may not work properly and we could not remember your cookie choice |
| Analytics | Telling us how the site is used so we can improve it (which pages people read, which buttons they press) | Off until you accept in the UK, EU, EEA and Switzerland. On from your first visit elsewhere, until you switch it off |
| Ads measurement | Telling us which of our ads bring readers to the site, and, where you allow it, showing our ads to people who visited | Off until you accept in the UK, EU, EEA and Switzerland. On from your first visit elsewhere, until you switch it off |
Cookie-free visit counting. We also use Cloudflare Web Analytics to count visits and measure page speed. It sets no cookies and keeps no identifier on your device, so it runs without a choice. It does not follow you from one visit to the next.
3. Every cookie and tag we use
| Name | Provider | Purpose | Class | Duration |
|---|---|---|---|---|
exp_consent |
Expression (first-party; local storage) | Remembers your cookie choice | Strictly necessary | 6 months |
exp_utm |
Expression (first-party; session storage) | Keeps the campaign name of the link you arrived from, so the app-store button can pass it on. Set only if you allow Ads measurement | Ads measurement | Until you close the tab |
_ga |
Google (Google Analytics 4) | Tells one browser from another so we can count visitors | Analytics | 2 years |
_ga_<container id> (for us _ga_RDJ846XF3J) |
Google (Google Analytics 4) | Keeps the state of your visit (session) | Analytics | 2 years |
_gcl_au |
Google (Google Ads) | Links an ad click to what happens next on our site, to measure ads | Ads measurement | 90 days |
IDE (on doubleclick.net) |
Google (Google Ads) | Lets Google show our ads to people who visited this site, and measure them | Ads measurement | 13 months |
test_cookie (on doubleclick.net) |
Google (Google Ads) | Checks whether your browser accepts cookies | Ads measurement | 15 minutes |
_gcl_aw |
Google (Google Ads) | Stores the ad click ID if you arrive from a Google ad. Set only in that case | Ads measurement | 90 days |
_fbp |
Meta (Meta Pixel) | Identifies your browser, so Meta can measure ads and show our ads | Ads measurement | 90 days |
_fbc |
Meta (Meta Pixel) | Stores the ad click ID if you arrive from a Meta ad. Set only in that case | Ads measurement | 90 days |
| (none) | Cloudflare (Web Analytics) | Cookie-free visit counting and page speed | None needed | Not applicable |
Notes:
- Google Analytics 4 (G-RDJ846XF3J) records page views, scrolling, clicks on links that leave our site, and our own events: app-store button clicks, calls to action and FAQ questions opened. We turned off site search, video, file download and form tracking. GA4 keeps its data for 14 months.
- Meta Pixel and Conversions API. When you allow Ads measurement, the same page-view and app-store-button events are also sent to Meta from our server, so Meta can match them to the Pixel. The server copy carries only the page address, your IP address, your browser type and the
_fbp/_fbcvalues above. Neither copy receives your name, email or anything you type into the site. - Google and Meta may set cookies on their own domains when you have allowed Ads measurement, under their own policies. We do not control those cookies. See Google’s and Meta’s cookie notices.
- Google Consent Mode. In the UK, EU, EEA and Switzerland, before you choose, Google tags run in a cookie-free mode. They may send Google a basic signal (page, time, browser type, your consent choice and approximate location from your IP address) with no cookie and no identifier.
- AppsFlyer. We load no AppsFlyer script on our site. The “Get the app” buttons open an AppsFlyer link; AppsFlyer records the tap to match an install to the page that sent you. AppsFlyer may store information when you open that link; see AppsFlyer’s privacy notice.
4. How the choice differs by place
We take your country from your connection when the page is delivered (our host, Cloudflare, tells us the country). We use it only to decide which banner to show.
| Where you are | What you see | What runs before you choose |
|---|---|---|
| UK, EU, EEA, Switzerland | A cookie banner on your first visit with three equal choices: Accept all, Reject all, Choose (turn Analytics and Ads measurement on or off, then Save choices) | Strictly necessary storage and the cookie-free visit counter only. Google tags may send the cookie-free signal described above |
| Everywhere else (including the US) | A notice bar saying we use cookies, with a link to this policy and Cookie settings | Analytics and Ads measurement run from your first visit. You can switch them off at any time |
| United States | The footer link Do not sell or share my personal information, as well as Cookie settings | Same as above until you opt out. Choosing the link switches off Ads measurement in this browser |
Please note: if you are travelling, or use a VPN, you may see the banner for another place. You can always open Cookie settings and choose again.
5. How to change your choice
- Cookie settings. Click Cookie settings in the footer of any page. You can switch Analytics and Ads measurement on or off, and save.
- Do not sell or share. In the US, click Do not sell or share my personal information in the footer.
- Your choice is remembered for 6 months. Then we ask again (or, outside the UK/EU/EEA/Switzerland, show the notice again).
- Your browser. You can delete or block cookies in your browser settings. If you delete
exp_consent, we will not know your choice and will ask again. - Your ad accounts. You can manage ad personalisation in your Google and Meta account settings.
- Withdrawing consent. In the UK, EU, EEA and Switzerland, rejecting or withdrawing is as easy as accepting. It does not affect what happened before.
6. Global Privacy Control
If your browser or an extension sends the Global Privacy Control (GPC) signal, we treat it as an opt-out of “sale” or “sharing” of personal information: Ads measurement is switched off and its tags do not load. Analytics follows your choice in Cookie settings. In the UK, EU, EEA and Switzerland, Ads measurement is already off unless you turn it on yourself.
7. Changes to this policy
The date at the top shows the latest version. If we add a new cookie or tag, we update the table above and, where the law requires, ask for your choice again.
8. Contact
Email support@expressiontarot.com. You can also complain to the UK Information Commissioner’s Office (ico.org.uk) or your own data protection authority.