Cookie Policy

Cookies are small text files stored on your device when you visit a website. They let a site remember your actions and preferences (such as your session, language or consent choice) over time. We also use similar browser storage (local and session storage) for small technical values; where we do, this policy covers it too.

Essential: needed for the site to work and to keep it secure (session continuity, security, load balancing, your consent choice, resuming an application you started). These do not require consent.

Analytics: help us understand how the site is used, in aggregate. Set only if you accept the Analytics category.

Marketing: measure the performance of our advertising (for example, that a Google Ads click led to an application). Set only if you accept the Marketing category.

By category, typical durations are: Essential cookies last from the end of your browsing session up to one year; Analytics cookies up to two years; Marketing cookies up to ninety days. The exact cookie-by-cookie list and durations are in section 3.

vp_consent (set by VisitPass): stores your cookie consent choice so we do not ask again. Category: Essential. Duration: 1 year, overwritten whenever you change your choice. Contains no personal data.

vp_guest_tracking (set by VisitPass): lets you resume a visa application you started as a guest, by linking your browser to your own draft. Category: Essential. Duration: 30 days. It is HttpOnly and Secure (not readable by scripts) and contains only your application's tracking reference.

_ga and _ga_<id> (set by Google Analytics): tell visits apart so we can measure traffic in aggregate. Category: Analytics. Duration: up to 2 years. Set only after you accept Analytics.

_gcl_au and related _gcl_* (set by Google Ads): attribute advertising clicks to conversions. Category: Marketing. Duration: up to 90 days. Set only after you accept Marketing.

Security and load-balancing cookies set by our content-delivery and security provider: keep the site available and protected against abuse. Category: Essential, session-based.

Session/local storage (set by VisitPass): small technical values such as a one-time page-reload marker after a deployment. Category: Essential, kept on your device only and never sent to us.

On your first visit from a region where consent is required (EEA, UK, Switzerland) we show a banner with equally prominent Accept and Reject options. We implement Google Consent Mode v2: analytics and advertising tags stay off until you grant the corresponding category.

You can change or withdraw your consent at any time via the Cookie settings link in the footer; withdrawing is as easy as granting. You can also block or delete cookies in your browser settings, though essential cookies are needed for the site to work.

Infrastructure cookies are set by our content-delivery and security provider acting as a processor under a GDPR Art. 28 agreement. Analytics and advertising data is processed by Google under the consent signals you grant; Google Analytics keeps event-level data for 2 to 14 months per our configuration. We do not use cookies to sell personal data, and we do not set marketing cookies from anyone other than Google.

For details on how these providers handle data and on international transfers, see our Privacy Policy.

If we add, remove or materially change a cookie, we update this page. If a new non-essential category were introduced, we would ask for your consent again before using it.