Cookies and Advertising
1. Summary
- mrbuff.ca sets no cookies itself. It stores one item in your browser's local storage: your cookie-notice choice.
- Cloudflare Web Analytics counts visits in aggregate. It is meant to set no cookie and store nothing on your device, and it is not loaded if your browser sends Global Privacy Control or Do Not Track. The cookie notice does not control it.
- Google Analytics 4 loads only if you press Accept in the cookie notice. If you accept, it sets the cookies _ga and _ga_6CT1YR5CP2.
- The site loads no advertising code and shows no ads today, so no advertising cookies are set. If ads start, this notice will be updated first.
- You can change your choice with "Cookie settings" in the page footer. This legal site, legal.tnaado.ca, has no ads, no analytics and sets no cookies.
2. Cookies and browser storage
2.1 What the code sets
The table is taken from the site's code, not from a test load of the live pages, which we have not done. Cookie lifetimes are Google's published defaults, not set by us.
| Name | Set by | Where | Purpose | Lifetime |
|---|---|---|---|---|
| mrbuff-consent | Mr Buff (first party) | Browser local storage, not a cookie | Remembers whether you accepted or declined in the cookie notice | Until you clear site data or change your choice; the notice asks again after twelve months |
| _ga | Google Analytics | mrbuff.ca (first party) | Tells visits from one browser apart so visits can be counted | Up to 2 years, per Google; set only after you accept |
| _ga_6CT1YR5CP2 | Google Analytics | mrbuff.ca (first party) | Keeps session state for our Analytics property | Up to 2 years, per Google; set only after you accept |
Cloudflare Web Analytics has no row because the site's code and its own cookie page say it sets nothing. If your browser blocks local storage, your choice lasts only for the visit.
2.2 Our own cookies
The site sets no cookies of its own. Filter settings and anything you type into the tools are held in memory only; they are not stored and not written to the page address.
2.3 Fonts
The site serves its fonts from its own address. It does not request fonts from Google.
3. Analytics
3.1 Cloudflare Web Analytics
Unless your browser sends Global Privacy Control or Do Not Track, each page loads the Cloudflare Web Analytics script (static.cloudflareinsights.com) when the page's cookie script runs, whatever you have chosen in the notice. It counts pages viewed, referrers, country, browser and device type and page speed. Cloudflare receives your IP address and browser details with the request and processes the data, including in the United States.
3.2 Google Analytics 4
We use Google Analytics 4 (measurement ID G-6CT1YR5CP2) to see which pages are read. The notice works with Google Consent Mode. All four consent signals start as denied, and Google's tag is not requested until you press Accept. Accept allows analytics storage only. The site never grants the advertising signals. Google receives page views, the page path (no query string or fragment), browser and device details and an approximate location. Your browser's referrer is not passed on. Google states that Google Analytics 4 does not log or store IP addresses. If you press Decline after accepting, Analytics is switched off for the rest of the visit and its cookies are deleted. If your browser sends a Global Privacy Control signal, the site treats it as a decline and hides the Accept button. Event data is kept for the period set in our property (2 or 14 months, Google's options); we have not verified which is set. To stop Google Analytics measuring you on any site, install the Google Analytics opt-out browser add-on.
4. Advertising
4.1 Today
The site loads no AdSense script, includes no ad units and shows no advertisements. Pages contain hidden empty placeholders for a future in-page ad slot. The AdSense publisher meta tag (publisher ID ca-pub-3228722733199849) and the ads.txt file are present for account verification and attribution; they are not ads.
4.2 If ads start
TNAADO's plan for any ads on this site is manual, responsive display units labelled "Advertisement" in the content, plus Google's dismissible bottom anchor on longer pages. It will not use the in-article format or Auto Ads, and will not show ads on the About, Contact, Privacy, Terms, Cookies, editorial, methodology, trust or site-map pages, or on this legal site. If that happens, third parties, including Google and its advertising partners, may place and read cookies on your browser, or use web beacons or IP addresses, to collect information as a result of ad serving on this site. Read How Google uses information from sites or apps that use our services for what Google does with this data. We will update this notice, the Privacy Policy and the cookie notice before any ad cookie is used, and the current notice does not cover them.
4.3 Advertising and our content
No retailer, gym or restaurant pays to be included, ranked or praised, and we do not use affiliate links. If a link ever pays us, we will say so next to it.
5. Your choices
- Use the notice, or "Cookie settings" in the page footer, to accept or decline Google Analytics. This does not change Cloudflare Web Analytics.
- Turn on Global Privacy Control or Do Not Track in your browser to stop the Cloudflare script; Global Privacy Control also keeps Google Analytics off.
- Install the Google Analytics opt-out add-on.
- Turn off personalised ads elsewhere in Google Ads Settings, or use the opt-out pages of the Digital Advertising Alliance (US) or Your Ad Choices (Canada).
- Block or delete cookies in your browser settings. The site still works without them.
6. US state privacy laws
We do not sell personal information for money and show no targeted advertising today. Some US state privacy laws define "sale", "sharing" or "targeted advertising" broadly enough to include advertising cookies like those that would come with ads. If ads start, you can opt out using the choices above, and you can ask us about your information at contact@tnaado.ca. See the Privacy Policy for your rights.
7. Visitors in the EEA, UK and Switzerland
The site is directed to visitors in the United States and Canada. Google Analytics waits for Accept in every region. The Cloudflare script loads without a consent step unless your browser sends Global Privacy Control or Do Not Track, and we do not collect consent for it. We treat that as a known gap, and we do not claim to meet European requirements.
8. Children
The site is not directed to children under 13, and we do not knowingly collect personal information from them.
9. Sources and basis
- The site's code (js/consent.js, lib/site.mjs, vercel.json content-security policy) and its own Cookie policy page (mrbuff.ca/cookies/, updated 26 October 2026), read 27 October 2026. No test load of the live pages was run, so cookie names and lifetimes are not observed values.
- Google Analytics Terms of Service, section 7, and Google, How Google uses information from sites or apps that use our services.
- Google Ad placement policies (support.google.com/adsense/answer/1346295): ads labelled "Advertisement"; Google anchor ads are dismissible (support.google.com/adsense/answer/9261805). Applies only if ads start.
- Google EU user consent policy (google.com/about/company/user-consent-policy/); California Privacy Protection Agency FAQ (cppa.ca.gov/faq.html) on opt-out preference signals.
- Whether Cloudflare Web Analytics needs consent under Canadian or US law, and whether a cookieless script that loads before the notice is acceptable, are questions for counsel. Not reviewed by counsel: see the notice at the top of this page.