Cookie, analytics and advertising policy

What is active now

Google Analytics 4 is active on this teaser on a strict opt-in basis: it loads only after you choose “Accept all” or “Analytics only” (or “Allow analytics” below), and declining or making no choice loads no Google tag and sets no analytics cookies. Our lawful basis for setting optional analytics cookies and running Google Analytics 4 is your consent, which you may withdraw at any time. Google Tag Manager is not used — the tag loads directly. The Meta (Facebook/Instagram) Pixel and Conversions API are also active on a strict, SEPARATE opt-in basis to measure our advertising, and load only after you choose “Accept all” on the banner or “Allow advertising” below; our lawful basis for setting or reading Meta advertising cookies and transmitting event data to Meta is your separate consent. TikTok advertiser onboarding is complete, but its tag is not installed and its website integration is deferred. Until you accept analytics, no page request or event is sent from this site to Google; until you allow advertising, nothing is sent to Meta; and nothing is ever sent to TikTok.

Standard HTTP requests still reach Auriatorium's US-hosted infrastructure, where ordinary security and operational logs may include an IP address and browser/user-agent. Campaign links can contain source and UTM values without using a tracking cookie; those values are stored only if someone submits the waitlist form, as described in the privacy statement.

The waitlist and unsubscribe forms send only the information described in the Privacy and Personal Information Collection Statement. Resend is used to deliver requested emails; it is not loaded into this page as an analytics or advertising tracker.

Google Analytics configuration

Hodfords operates a Google Analytics 4 web stream for this site. These identifiers are public configuration values:

Web stream

https://hello.auriatorium.com

GA4 Measurement ID

G-96F3JKGX83

Google Tag Manager container

GTM-KWKNDB33 — not used

Administrative country setting

United Kingdom for the Analytics account and property. This setting does not change the Hong Kong controller identified in the privacy statement.

When you allow analytics, the tag measures visits and interactions so Auriatorium can understand site use and campaign performance. The stream's top-level enhanced-measurement setting is on; Google describes its enhanced-measurement options as page views, 90% scrolls, outbound clicks, site searches, supported YouTube video engagement, file downloads and form-start/form-submit events. No email address, form content or other directly identifying waitlist information is sent to Google; standard browser request metadata is handled by Google under its Analytics safeguards.

When analytics storage is allowed, GA4 uses the first-party cookies _ga to distinguish users and _ga_<container-id> (_ga_96F3JKGX83) to retain session state. Google documents a default two-year expiry for each. These cookies are set only after you allow analytics and are not set if you decline or make no choice. To remember whether you allowed or declined analytics for the current notice version (2026-10-24), this site stores a strictly necessary preference record (auriatorium_privacy_choices) in your browser's localStorage. Within Google Analytics, the property itself is configured to keep event data for two months and user data for two months, without resetting the user-retention period on new activity.

Google explains its handling in its Analytics data safeguards and Privacy Policy.

Analytics and advertising limits

• Google signals is off.
• User-provided data collection is off.
• Ads personalisation is disabled in all 307 selectable regions.
• Optional Google data-sharing settings and Google marketing emails are off.
• Google Ads is not planned. Google consent values for advertising storage, advertising user data and advertising personalisation remain denied even if analytics is allowed.

The Google implementation is strict basic consent mode: no Google tag or other optional vendor tag loads and no data is sent to Google before a current affirmative analytics choice. Choose “Allow analytics” to enable it or “Keep optional tracking off” to decline; rejecting or withdrawing analytics keeps the tag blocked, and you can change your choice here at any time.

Advertising — Meta Pixel + Conversions API (opt-in)

With your separate affirmative advertising choice, Auriatorium uses the Meta (Facebook/Instagram) Pixel and server-side Conversions API to measure our advertising. Our lawful basis under UK PECR and UK GDPR is your consent. The Meta business portfolio is ID 1678040803743082 and the Meta Pixel is ID 2307684030055231. When — and only when — you allow advertising, the pixel loads from connect.facebook.net and sets the first-party _fbp browser-identifier cookie (stored for up to 90 days) and reads or sets the first-party _fbc click-identifier cookie (stored for up to 90 days if you arrived from a Meta ad click carrying an fbclid parameter); a PageView and, on a waitlist submission, a Lead event are sent to Meta. The Conversions API additionally sends the same conversion event server-side, matched with a one-way SHA-256 cryptographic hash of your normalised email address plus your IP address, browser user-agent, and _fbp/_fbc identifiers, and deduplicated with the browser event by a shared event_id. TikTok advertiser onboarding has been completed for https://hello.auriatorium.com (United Kingdom; Hodfords Solutions Limited as the invoice/business name) but no TikTok Pixel or web event source is configured and its website integration is deferred.

For the collection of personal data via the Meta Pixel and Conversions API and its transmission to Meta, Hodfords Limited and Meta Platforms Ireland Limited (Merrion Road, Dublin 4, D04 X2K5, Ireland) act as joint controllers under Article 26 of the UK GDPR in accordance with the Meta Controller Addendum and Meta Business Tools Terms. Hodfords is responsible for providing this notice and obtaining your prior consent before the tag loads or server events fire; Meta is responsible for enabling data subject rights under Articles 15–20 of the GDPR for data held by Meta after transmission, and processes received event data as an independent controller for ad measurement, delivery optimisation, and service integrity under the Meta Privacy Policy and Meta Cookies Policy. Where event data is transferred to Meta Platforms, Inc. in the United States, transfers are safeguarded by the EU-US Data Privacy Framework and the UK Extension to the EU-US Data Privacy Framework, supplemented where applicable by the European Commission Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum (IDTA).

Advertising requires a separate affirmative choice: it is never enabled by default and cannot rely on your consent to receive Auriatorium waitlist emails or your consent to analytics. The server-side Conversions API is not a consent bypass — it fires only when you have allowed advertising for the current notice version (2026-10-25). A missing, rejected or older choice sends nothing to Meta, and you can withdraw advertising here at any time, as easily as you gave it, which immediately stops further events and prevents the Meta tag from loading on future visits (you may also delete existing _fbp/_fbc cookies in your browser settings).

Contact

Auriatorium is a trading name of Hodfords Limited, a Hong Kong limited liability company. For privacy questions, email privacy@hodfords.com, or use info@hodfords.com.