This Policy describes every cookie and similar technology (local storage, session storage, pixels, SDKs) used on als-analytical.hk and portal.als-analytical.hk, what it does, who sets it, and how long it lasts.
A cookie is a small text file stored on your device when you visit a website. Cookies allow us to recognise your browser, remember preferences, keep you signed in, and understand aggregate usage. ‘Similar technologies’ include browser local and session storage, ETag beacons, and mobile SDK identifiers; this Policy covers all of them.
We classify cookies as strictly necessary, preferences, analytics, or marketing. Strictly-necessary cookies do not require consent (PDPO §4-aligned and Art. 5(3) e-Privacy exempt). All other categories are off by default until you consent through our cookie banner.
| Name | Provider | Purpose | Category | Retention |
|---|---|---|---|---|
| als_session | als-analytical.hk | Signed session for portal auth (HttpOnly, Secure, SameSite=Lax) | Strictly necessary | Session |
| mrd_csrf | als-analytical.hk | Cross-site request forgery token | Strictly necessary | Session |
| mrd_consent_v2 | als-analytical.hk | Records your cookie-consent choices | Strictly necessary | 12 months |
| mrd_locale | als-analytical.hk | Remembers language (EN/ZH-HK/ZH-CN/JA) | Preferences | 12 months |
| mrd_theme | als-analytical.hk | Remembers light/dark theme in the portal | Preferences | 12 months |
| _ga, _ga_XXXX | Google (Ireland) Ltd. — GA4 | Aggregate site analytics with IP anonymisation and Google Signals off | Analytics | 13 months |
| ph_XXXX_posthog | PostHog Inc. (EU-region cluster) | Product analytics for the portal (event capture, no session replay) | Analytics | 12 months |
| _cfuvid, cf_bm | Cloudflare Inc. | Bot management and rate limiting (short-lived, no cross-site tracking) | Strictly necessary | 30 min – Session |
| li_at, lidc, bcookie | LinkedIn Ireland UC | Set only when you interact with an embedded LinkedIn button | Marketing | Up to 2 years |
You can change or withdraw consent at any time via the ‘Cookie preferences’ link in the site footer. Most browsers let you refuse cookies or delete existing ones (see aboutcookies.org for guides). Blocking strictly-necessary cookies may prevent portal login and secure form submission.
We honour the Global Privacy Control (GPC) signal as an opt-out from analytics and marketing cookies. Because ‘Do Not Track’ is not a standardised opt-out under PDPO or GDPR, we do not treat DNT alone as a consent withdrawal, but we do honour it when combined with a GPC signal.
We review the cookie inventory at least every six months and after any material change to the site. Where new categories or providers are introduced, we will re-solicit consent before setting non-essential cookies.