Effective date: 21 September 2026 | Website: https://crannraiforestcertification.ie/
Cookies are small text files stored on a device when a website is visited. Similar technologies include pixels, tags, local storage and scripts that recognise a browser or collect information about use of a website. Some are necessary for a site to work; others support analytics, preferences or marketing.
Under Irish ePrivacy rules, storing or accessing information on a user’s device generally requires prior consent unless the technology is strictly necessary to provide a service expressly requested by the user. Personal data generated by these technologies is also subject to GDPR.
The site uses WordPress and performance/caching technology. The reviewed public code also contains Google Tag Manager/Google tag and Microsoft Clarity. These analytics technologies can collect device and interaction information and must be held back until a visitor gives valid analytics consent. Crannraí does not intend to use cookies to sell personal data.
| Implementation requirement Before publication, install/configure a compliant consent management platform so that Google tags and Microsoft Clarity do not load before analytics consent; provide equally prominent Accept and Reject options; permit granular choices; record consent; and add a persistent “Cookie Settings” link. |
| Category | Purpose | Consent |
| Strictly necessary | Security, network delivery, basic WordPress operation and remembering privacy choices. These should be limited to what is essential. | Not normally required, but users must be informed. |
| Preferences/functionality | Remember optional choices or enable a feature requested by the visitor. | Required unless strictly necessary for a requested feature. |
| Analytics/performance | Measure visits and interactions, diagnose performance and improve the site; may include session recording or heatmaps. | Prior consent required. |
| Marketing | Build profiles, measure campaigns or show targeted advertising. | Prior consent required. No marketing purpose was confirmed in the reviewed site content. |
The table below reflects technologies identified in the public site code on 21 September 2026. Cookie names and durations can change through provider updates or tag configuration, so Crannraí must validate the final list with a consented browser scan before publication and after material website changes.
| Provider / technology | Likely identifiers | Purpose and proposed category | Duration / action |
| Crannraí / WordPress / LiteSpeed Cache | May include _lscache_vary and session/local-storage values, depending on configuration | Site delivery, caching, performance and security — strictly necessary only where essential | Session or short-lived; confirm actual values and necessity. |
| Consent management platform | Provider-specific consent cookie | Stores the visitor’s category choices and evidence of consent — strictly necessary | Set a proportionate period, proposed 6 months, then request consent again. |
| Google Tag Manager / Google tag | GTM-52LMMKS4; GT-PBKKJMGZ; cookies may include _ga and _ga_<container> if Google Analytics is configured | Tag management and audience/usage measurement — analytics; marketing only if advertising tags are added | Block before consent. Confirm connected tags and exact cookie durations in GTM/Site Kit. |
| Microsoft Clarity | _clck, _clsk; third-party identifiers may include CLID, ANONCHK, MR, MUID and SM | Usage analytics, heatmaps and session recordings — analytics | Block before consent and pass a valid consent signal. Microsoft states _clck persists the site-specific user ID and _clsk connects page views; confirm current durations in the live scan. |
| External links, including Google Maps and DAFM | Set by the external provider after the visitor follows the link | External service is not embedded in the reviewed pages; provider processing begins when its site is opened | Review the external provider’s policy. If content is later embedded, block it until the appropriate consent is given. |
Google Tag Manager is a container used to deploy and manage website tags. The Google tag can send usage data to connected Google services. The final behaviour depends on the tags configured in Google Tag Manager and Google Site Kit. Crannraí must maintain an internal tag inventory, disable advertising features unless intentionally approved, configure appropriate retention and consent mode, and ensure no non-essential tag fires before consent.
Microsoft Clarity can collect pseudonymous browser identifiers and interaction information to provide analytics, heatmaps and session recordings. Session recordings should be configured to mask sensitive content and exclude any fields or pages where personal data could appear. Microsoft requires a valid consent signal for full functionality for visitors in the EEA, United Kingdom and Switzerland. Clarity must therefore remain inactive until analytics consent is given.
On the first visit, the website should display a consent banner that allows you to:
Withdrawing consent does not affect processing that was lawful before withdrawal. It should stop future optional storage/access and prevent the relevant tags from firing. Existing cookies may be deleted through browser settings or, where technically possible, by the consent tool.
Most browsers allow cookies to be viewed, blocked or deleted. Blocking all cookies may affect strictly necessary functions. Browser controls do not replace the website’s duty to obtain consent before non-essential cookies are set. Instructions are available from the relevant browser provider.
Google and Microsoft may receive data as independent controllers or processors depending on the service and configuration. Their processing may involve countries outside the EEA. Crannraí will use approved services and contractual/transfer safeguards and will keep vendor settings and documentation under review. Visitors should also consult the providers’ current privacy and cookie information.
We will update this Cookie Policy when technologies, purposes, providers or retention periods change. A fresh consent request will be presented where a material change requires it. Questions may be sent to certification@crannraiforestcertification.ie.