Cookie Policy


1. About this cookie policy
This cookie policy explains how Space Forge Limited ("Space Forge", "we", "us") uses cookies and similar technologies on its website at www.spaceforge.com. It should be read together with our Privacy Policy, which explains how we handle personal data more generally - including the lawful bases we rely on, international transfers, and your rights in the UK, EEA, United States and elsewhere. For any question, contact privacy@spaceforge.com.

2. What are cookies?
Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work, to remember your preferences, and to provide information to the site owner. Similar technologies (such as pixels, local storage and software development kits) perform comparable functions; where we refer to "cookies" in this policy, we mean cookies and these similar technologies. The Privacy and Electronic Communications Regulations (PECR) apply to all storage of, and access to, information on your device - not just to traditional cookies - so the consent approach below covers these similar technologies too.

3. How we use cookies, and your consent
We use some cookies that are strictly necessary to make the website function. These do not require consent. All other cookies - including analytics, functional/embedded content and any anti-abuse (CAPTCHA) technology that sets cookies or sends data to a third party - are non-essential, and we only set them with your consent. When you first visit the website, a cookie banner (provided by Cookiebot) lets you accept or reject non-essential cookies. We do not set non-essential cookies until you have given your consent, and you can change or withdraw your choices at any time (see section 6). Where required, we also honour browser-level signals such as Global Privacy Control (GPC). This reflects our obligations under PECR and the UK GDPR (and, for EEA visitors, the ePrivacy rules and EU GDPR).

4. The categories of cookies we use
Strictly necessary.
Required for the website to work (for example, security and remembering your cookie choices). These are always active and do not require consent. Analytics. Help us understand how visitors use the website - which pages are visited and how people navigate - so we can improve it. We use Google Analytics for this. Set only with your consent.
Tag management. We use Google Tag Manager to load and manage the tags on the site (such as Google Analytics). Tag Manager is a container that does not itself set cookies; it controls when other tags - and the cookies they set - are loaded. Non-essential tags, including Google Analytics, are configured to fire only after you consent, using Google Consent Mode v2, so no analytics cookie is set until you accept.
Functional. Enable enhanced features or embedded third-party content. We do not currently embed third-party content - video is hosted directly - so no functional cookies are set at present.
Anti-abuse (CAPTCHA). Used to protect forms from spam and abuse. We use Cloudflare Turnstile, integrated through Webflow; we do not use Google reCAPTCHA. Turnstile is privacy-focused and sets a single strictly-necessary Cloudflare cookie (_cfuvid) to distinguish visitors that share an IP address. As it is strictly necessary to protect the forms you choose to use, it does not require consent.
Marketing. Used to measure or support marketing activity. We do not use marketing or advertising cookies and have no plans to. If this changes, we will update this policy and seek consent.

5. Cookies used on this website
The table below lists the cookies we expect to use. It is provisional and should be confirmed against a live scan of the published site, as exact names, providers and durations can change with the site's configuration and any embedded content.

Cookie Provider Category Purpose Consent Duration
_ga Google Analytics Analytics Distinguishes unique visitors to measure site usage. Required ~2 years
_ga_[ID] Google Analytics Analytics Persists the GA4 session and measurement state. Required ~2 years
(Cloudflare Turnstile) Cloudflare Anti-abuse Form anti-abuse integrated via Webflow. Sets the strictly-necessary _cfuvid cookie below. Not required -
(Google Tag Manager) Google Tag management Container that loads and controls other tags. Does not set cookies of its own; the tags it fires are listed above and gated by consent. Not applicable -
CookieConsent Cookiebot (Usercentrics) Strictly necessary Stores your cookie-consent choices so we can honour them. Not required 1 year
_cfuvid Cloudflare (Turnstile) Strictly necessary Set by Cloudflare Turnstile (form anti-abuse, integrated via Webflow) to distinguish visitors that share an IP address; not used to track across sites. Not required Session


6. How to manage or withdraw consent
You can change or withdraw your cookie choices at any time using the "Cookie settings" link on the website (or by clearing cookies and reloading the site to bring the banner back). Where your browser sends a Global Privacy Control (GPC) signal, we honour it. You can also control and delete cookies through your browser settings - most browsers let you block or remove cookies, though doing so may affect how the website works. For more on managing cookies, see aboutcookies.org or your browser's help pages. To opt out of Google Analytics specifically, see Google's browser add-on.

7. Third-party cookies
Some cookies are set by third parties that provide services on the website (for example, Google for analytics and tag management, and Cookiebot / Usercentrics for cookie-consent management). Our form anti-abuse uses Cloudflare Turnstile, provided through Webflow (Cloudflare acts as Webflow's sub-processor); it sets the strictly-necessary _cfuvid cookie described above. These providers process data under their own privacy and cookie notices. Google's is available at policies.google.com/privacy; Webflow's and Cookiebot's are available in their respective privacy policies (https://webflow.com/legal/privacy / https://www.cookiebot.com/us/) Google (and, via Webflow, Cloudflare) may process data in the United States; Cookiebot (Usercentrics) is EU-based and processes consent data within the EEA (see international transfers in our Privacy Policy).  Some of these third parties are located outside the UK/EEA. International transfers of personal data are addressed in our Privacy Policy. If you are a US resident, note that our use of analytics cookies may count as "sharing" or a "sale" under certain state privacy laws; how to opt out is explained in the "Your US state privacy rights" section of the Privacy Policy.

8. Changes to this policy
We may update this policy from time to time - for example, if the cookies we use change. We will revise the "Last updated" date above when we do. Contact us If you have any questions about our use of cookies, contact us at privacy@spaceforge.com, or write to Space Forge Limited, Unit 10 Eastgate Business Park, Wentloog Avenue, Cardiff, Wales, CF3 2EY.