Cookies and analytics

How this website starter is intended to handle enquiry and website information.

Essential form security

The enquiry endpoints use a PHP session cookie named lma_quote for CSRF and duplicate checks. The cookie is HttpOnly, SameSite=Lax and Secure when HTTPS is correctly detected. Check actual cookies on the deployed host.

Optional analytics

Analytics is disabled by default. If enabled, the chosen Google Analytics or GTM script only loads after acceptance. Your choice is saved in localStorage under lma-analytics-consent-v1 with a 180-day renewal period.

Changing your choice

Cookie settings lets you accept or reject analytics. Withdrawal updates consent and reloads; previously written Google cookies are not automatically deleted. If localStorage is blocked, optional analytics remains off.

Change analytics preference

Third-party links

WhatsApp and review links open another provider’s site. No map or embedded review widget is loaded. Audit cookies and providers again if adding advertising, maps or chat tools.