Privacy

Last updated: 17 May 2026

This page explains what data markstent.co.za collects when you visit, why, and how to opt out. The site is operated by Mark Stent, based in London, United Kingdom.

What gets collected

• Server logs. The web server records standard request information — IP address, user agent, referrer, requested URL — for security and performance monitoring. Logs are retained briefly and not used to build profiles.
• Google Analytics 4 (opt-in only). If you click Accept on the cookie banner, GA4 sets a small set of cookies to count repeat visits and produce aggregated traffic statistics. IP addresses are truncated, Google Signals is disabled, and data retention is set to the minimum. If you click Reject, GA4 runs in consent mode and may send anonymous, cookieless pings used only for aggregate counts — no identifiers are stored on your device.
• Cloudflare Turnstile. If a contact form on this site uses Turnstile, it may run a brief, privacy-preserving check to confirm you are not a bot. Turnstile does not use tracking cookies.

Cookies

The cookie banner on your first visit asks whether to enable analytics cookies. Until you choose, nothing non-essential is set.

• Analytics cookies (opt-in): if accepted, Google Analytics sets _ga and _ga_<property-id> to recognise repeat visits. Lifetime: up to 2 years.
• Consent record: your choice is stored in your browser's local storage under ms_consent. To change it, clear that entry in your browser's site data and reload — the banner will appear again.

Third parties

• Google for Analytics. See the Google privacy policy.
• Cloudflare for Turnstile bot protection. See the Cloudflare privacy policy.
• Spotify embeds may be used to display music. If you interact with them, Spotify's own cookies and policies apply.

Your rights

Under UK GDPR you have the right to access, correct, port, or erase personal data held about you, and to object to processing. To exercise any of these rights, get in touch at hello@markstent.co.za.

International transfers

Some data may be processed outside the UK and the European Economic Area. Where this happens, transfers rely on the EU-US Data Privacy Framework (which Google self-certifies under) or Standard Contractual Clauses.

Changes

If this page changes materially, the "last updated" date at the top will reflect that. Continuing to use the site after a change means you accept the updated policy.