COOKIE POLICY

How we use cookies

Last updated: 3 September 2026 Applies to: dufp.org

This policy lists every cookie that can be set on dufp.org, what each one is for and how long it lasts. Only strictly necessary cookies are set before you choose. You can change your choice at any time using the control in the footer of any page.

1. What Are Cookies

A cookie is a small text file that a website asks your browser to save, and which your browser sends back the next time you visit. Cookies are how a site remembers something between one page and the next.

Other technologies do a similar job, and we treat them under this policy in the same way as cookies:

Local storage and session storage
Stores data in your browser rather than sending it back with every request.
Pixels and tracking images
A tiny image whose only purpose is to signal that a page or an email was opened.
Device fingerprinting
Recognising a visitor from a combination of browser and device characteristics rather than a stored file. We do not do this, and we would need your consent if we ever wanted to.

Cookies set by the site you are visiting are called first party. Cookies set by another domain whose content is embedded in the page are third party. Third party cookies are the ones that make cross site tracking possible, which is why they sit behind consent here.

We group cookies into four categories. Only the first is active before you make a choice.

Strictly necessary  (always on)
Required for the website to work and to stay secure. These are set because you asked for a page, so the law does not require consent for them, and you cannot turn them off while using the site. They include the cookie that records your cookie choice, and the security cookies set by our hosting provider Cloudflare.
Functional  (off until you allow it)
Remember a preference so that you do not have to set it again. We do not currently set any functional cookie beyond your consent record.
Analytics  (off until you allow it)
Help us understand, in aggregate, which pages people find useful. No analytics cookie is set and no analytics script is loaded unless you allow this category. We are not running analytics on dufp.org at the time of writing.
Advertising  (off until you allow it)
Used by an advertising network to measure and select advertisements. No advertising cookie is set and no advertising script is loaded unless you allow this category. We are not running advertising on dufp.org at the time of writing.
How the blocking actually works Analytics and advertising tags on this site are written into the page in a form the browser will not execute, and are converted into live scripts only after you allow that category. This is why we can say that nothing in those categories runs beforehand, rather than only that no cookie is written.

This is the complete list of cookies that can be set on dufp.org, and the state each one is in today.

Strictly necessary. Set without consent, and cannot be turned off
NameSet by PurposeDuration
dufp_consent dufp.org (first party) Stores your cookie choice, per category, with the date you made it, so that we do not ask again on every page and can show what you agreed to 6 months
__cf_bm Cloudflare (third party) Bot management. Distinguishes a person from an automated client so that malicious traffic can be filtered 30 minutes of inactivity
_cfuvid Cloudflare (third party) Applies rate limiting correctly by telling apart individual visitors who share one IP address Session
cf_clearance Cloudflare (third party) Records that a security challenge was completed, so that you are not challenged repeatedly. Set only if a challenge was shown Up to 1 year, depending on configuration
__cflb Cloudflare (third party) Keeps your session on one origin server. Set only where load balancing is in use Seconds up to 24 hours

Cloudflare's cookies are set because our site is delivered through its network and are necessary to serve and protect the site. They do not track you across other websites for advertising. Cloudflare documents them at developers.cloudflare.com.

Analytics. Not currently in use, and only ever after consent
NameSet by PurposeDuration
_gaGoogle Analytics 4 Distinguishes one visitor from another2 years
_ga_<container id>Google Analytics 4 Maintains the session state for the property2 years

Status: not set. We are not running Google Analytics on dufp.org today. This row is published so that you can see exactly what would be set if we enable it, and so that the table does not need to change silently later.

Advertising. Not currently in use, and only ever after consent
NameSet by PurposeDuration
__gads, __gpiGoogle AdSense Measures advertisement interactions and limits how often the same advertisement is shownUp to 13 months
IDE, test_cookie Google DoubleClick Advertisement selection and measurement Up to 13 months

Status: not set. There is no advertising on dufp.org today.

South African law, through POPIA and the Electronic Communications and Transactions Act, requires us to tell you what we are collecting and to obtain your agreement before we process personal information for a purpose you would not expect. We apply the stricter European standard across the whole site rather than maintaining two different experiences.

How we ask

  • A banner appears on your first visit, before any non essential cookie is set.
  • It offers Accept all, Reject all and Manage preferences. Accept and Reject are the same size, in the same style, side by side. Neither is hidden behind an extra click.
  • Manage preferences lets you allow analytics and advertising separately. Strictly necessary cookies are shown but cannot be switched off, because the site cannot be delivered without them.
  • Closing or ignoring the banner is treated as a refusal. Nothing non essential is set unless you actively allow it.
  • There is no cookie wall. Refusing gives you the same access to the same content.
  • We record which categories you allowed and when, so that we can demonstrate it if asked.

Changing your mind

You can change or withdraw your choice at any time, and it is exactly as easy as giving it was:

The same control sits in the footer of every page on this site. When you withdraw consent for a category we stop loading its scripts and delete the cookies that category had set.

We ask again after six months in any case, so that a choice you made long ago does not stand forever.

5. Managing Cookies in Your Browser

Independently of our banner, your browser gives you control over all cookies, including the strictly necessary ones. Blocking everything may stop parts of this or any other site from working.

Google Chrome
Settings, then Privacy and security, then Third party cookies. Use “See all site data and permissions” to remove data for one site.
Safari on macOS
Safari, then Settings, then Privacy. Use “Manage Website Data” to remove data for one site.
Safari on iOS and iPadOS
Settings, then Apps, then Safari, then Advanced, then Website Data.
Mozilla Firefox
Settings, then Privacy & Security, then Cookies and Site Data.
Microsoft Edge
Settings, then Cookies and site permissions, then Manage and delete cookies and site data.
Android and Chrome on mobile
Chrome, then the three dot menu, then Settings, then Site settings.

Most browsers also offer a private or incognito window, which discards cookies when you close it. Deleting our consent cookie will make the banner appear again, because the record of your choice is what that cookie holds.

Two further options worth knowing about:

  • Global Privacy Control. If your browser or extension sends a GPC signal, we honour it as an objection to any non essential processing.
  • Do Not Track. There is no agreed standard for how a site should respond to a DNT header, so we do not rely on it. Our banner and the GPC signal are the reliable routes.

6. Contact

If anything in this policy is unclear, or you think a cookie is being set that is not listed here, please tell us. A report like that is genuinely useful to us.

Post
Development United For Progress
18 Culm Road
Plumstead
Cape Town 7800
South Africa
Email
z@dufp.org
Telephone
+27 21 482 3956

See also our Privacy Policy and Terms of Use.