Cookies.

1 · Cookies this site sets.

Three kinds, and the differences matter.

Necessary. One cookie, _cfuvid, set by Cloudflare, which delivers and protects this site. It tells one visitor apart from another so that abuse can be rate-limited, holds no name or contact detail, is deleted when you close your browser, and no script on the page can read it. It requires no consent under UAE law, because the service you request cannot be delivered without it.

Measurement. Four cookies, from two tools. Google Analytics sets _ga and _ga_X3CYWPW9WT, so that a returning visit is not counted twice. Both are asked to last up to 400 days, a little over thirteen months; your browser may shorten that, and Safari shortens it considerably. Microsoft Clarity sets _clck, which holds the anonymous identifier that tells one visitor from another, and _clsk, which joins the pages of a single visit into one session. None of the four is necessary, and you may refuse them all.

Advertising measurement. Meta’s pixel sets _fbp, which lasts up to 90 days and lets us measure our own advertising on Meta’s platforms. And if one of our Google advertisements brought you here, this site sets one cookie of its own, dmdc_gclid, for up to 90 days — it holds the click reference and nothing else, and no one but this site can read it. Neither is necessary, and you may refuse both.

2 · What the measurement does, and does not do.

It records which pages are read, in what order, which link or search brought you here, and roughly where in the world the visit came from. Clarity also replays the visit: where the pointer moved, what was clicked, how far each page was scrolled. It does not record who you are. Text typed into a field is masked before it leaves your browser, so we never receive it. Nothing collected is joined to a brief, a name or an address.

The measurement is Google Analytics and Microsoft Clarity. Both are loaded from their own addresses and contacted directly by your browser while you read, and the records are theirs to hold — by Google LLC and by Microsoft Corporation, as our processors, on infrastructure outside the UAE, under their contractual data protection terms. The privacy notice gives the legal basis and the retention period.

The advertising measurement is Meta’s pixel, contacted directly by your browser, its records held by Meta Platforms as our processor under its data protection terms. It measures our own campaigns — which of our advertisements led to a visit — and the dmdc_gclid cookie exists so that an enquiry you choose to send on WhatsApp can be matched to the Google advertisement that brought you. We run no third-party advertising networks here, and nothing about you is sold. Our own pages we measure to learn which of our guides are useful and where a page loses people — that is the whole of it.

Two further parties necessarily see that you asked for a page, because they deliver it: Webflow, which hosts this site, and Cloudflare, which serves it. They receive what any web server receives — the address you asked for and the network address you asked from. Neither is given anything you type.

3 · Your controls.

No banner interrupts you, and no consent is claimed on your behalf: the measurement cookies are set when you arrive, and this page says so plainly rather than burying it in a dialogue nobody reads. If you would rather they were not set, every browser can block or delete them — Safari, Chrome, Firefox and Edge all keep the setting under site data or tracking prevention — and the site remains entirely readable if you do. No page is withheld and nothing is degraded.

Blocking cookies does not stop the Private Brief from sending. The form does not rely on a cookie to work.

4 · When this page changes.

This page and the privacy notice change together, on the same day, and the version date above changes with them. The measurement described here changed on 25 August 2026: these pages had described a different measurement tool that was never in service, and Google Analytics replaced that description with what the site actually does. The measurement changed again on 29 August 2026: Microsoft Clarity was added, the Google Analytics property was corrected to the one this company holds, and the arrangement that routed Google’s readings through dmdc.ae was removed — it was never in service, and the readings now go to Google directly. And it changed once more on 1 September 2026: Meta’s pixel was added so that our own advertising can be measured, and the site began setting dmdc_gclid when a Google advertisement brings a visitor here, so that an enquiry can be matched to the advertisement that produced it.