The short version: our public marketing and booking pages load Google Tag Manager, which in turn runs Google Analytics, Google Ads remarketing and Hotjar. Our enrolment and admin pages deliberately load none of it. Section 2 lists everything, and section 5 explains how to switch it off.
1. What cookies and browser storage are
Cookies are small text files a website asks your browser to keep. Related technologies —
sessionStorage and localStorage — let a site keep a small amount of information in the
browser itself rather than sending it back and forth. This policy covers all of them, because what matters is what is
stored, not the mechanism.
2. What this site stores
2.1 Strictly necessary — set by us
These are needed for the site to function. Set out in full, with nothing omitted:
| What | Type | Why | How long |
|---|---|---|---|
tc_prefill |
Session storage | Carries the course you selected from the course list into the booking form, so you do not have to pick it twice. | Cleared when you close the tab. |
tc_upsell_sk |
Session storage | Remembers which combo package option you were shown during a single booking, so the price stays consistent as you move between steps. | Cleared when you close the tab. |
| Cloudflare Turnstile | Third-party cookie / storage | Bot protection on our booking, enrolment and contact forms. It confirms a real person is submitting the form. Turnstile is designed not to profile users or track them across sites. | Set by Cloudflare; short-lived. |
| Admin session token | Local storage | Keeps staff signed in to the private admin area at /admin. It is only ever set after a staff member logs in, and is never set for public visitors. |
Until logout or expiry. |
2.2 Analytics and advertising — set via Google Tag Manager
Our public marketing and booking pages load Google Tag Manager (containers
GTM-K4XVP6CZ and GTM-NG8G64L8). Tag Manager is a loader: it sets no analytics cookie by
itself, but it runs the tags configured inside it. Those currently include:
| Service | What it does | Set by |
|---|---|---|
Google Analytics 4G-1E272D4MD7 |
Measures how many people visit, which pages they read and which courses get attention. Sets Google
analytics cookies (typically _ga and _ga_*). |
|
| Google Ads remarketing | Allows us to show ads to people who have visited the site. This is advertising, not just measurement. | |
| Hotjar | Records aggregate behaviour such as scrolling and clicks so we can see where pages confuse people. | Hotjar |
| Meta Pixel | Advertising measurement for our Meta (Facebook/Instagram) campaigns. Present in the tag configuration. | Meta |
Because these are third-party tags, the exact cookies set are controlled by those providers and can change when the tag configuration changes. Google's practices are described in the Google privacy & terms; Hotjar's in the Hotjar privacy policy; Meta's in the Meta privacy policy.
2.3 Where analytics and advertising tags are deliberately NOT loaded
No third-party tracking script is loaded on the pages that handle your personal information: the Enrolment Agreement (which carries your USI, date of birth, address, signature and LLND answers) and the staff admin area. That is a deliberate design decision, not an accident — those pages load no Tag Manager, no analytics and no advertising tag at all.
3. Other third-party services loaded by this site
For completeness, these are the remaining external services our pages request resources from:
- Cloudflare Turnstile — bot protection on forms, as described in section 2.1.
- Google Fonts — serves the typeface used across the site. Requesting a font exposes your IP address to Google in the same way as loading any external file.
- Tailwind CSS (
cdn.tailwindcss.com) — serves the stylesheet framework. No cookies are set.
4. Social media
Our pages link to Facebook, Instagram and LinkedIn. Following one of those links takes you to a third-party platform which may set its own cookies and, if you are logged in there, associate the visit with your account. Those platforms are governed by their own policies, not this one.
5. Managing and opting out
Analytics and advertising
You can opt out of the tracking described in section 2.2 without affecting your ability to book a course:
- Google Analytics: install the Google Analytics opt-out browser add-on.
- Google advertising: adjust your Google Ad Settings.
- Meta advertising: adjust your ad preferences in your Facebook or Instagram account settings.
- Hotjar: use the Hotjar do-not-track opt-out.
- All of the above at once: most browsers offer a tracking-protection or block-third-party-cookies setting, which stops these tags from storing anything.
Everything else
You can block or delete cookies and site storage at any time through your browser settings — every major browser allows you to block all cookies, delete what is already stored, or be notified when a cookie is set.
Blocking the strictly-necessary items in section 2.1 has a practical cost: the booking, enrolment and contact forms will not submit if Turnstile is blocked, and your course selection will not carry between pages.
6. More information
How we handle the personal information you give us — as distinct from what your browser stores — is set out in our Privacy Policy.
Questions about this policy: admin@trainingcombined.com.au or 0403 415 066.