Add privacy policy page and cookie consent banner

Browse Source

The site was loading Google Analytics 4 unconditionally with no consent
gate — non-essential cookies set before consent (PECR reg. 6), and no
privacy policy was published at all.

- Add /privacy — full Privacy and Cookie Policy from tinqs/legal,
  styled with the site's existing design tokens, no tracking on the page
- Gate GA4 behind opt-in consent (consent.js / consent.css); nothing
  loads until the visitor accepts, and declining clears any _ga cookies
- Add Privacy Policy + Cookie Settings links to the footer, patched in
  the footer component so they survive React hydration
- Cookie Settings reopens the banner so consent can be withdrawn as
  easily as it was given (UK GDPR Art. 7(3))
- Add /privacy to sitemap.xml

Verified with Playwright: zero googletagmanager requests before consent,
GA loads only after Accept, choice persists across reloads, withdrawal
works, no horizontal scroll on mobile.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

...

This commit is contained in:

Jeremy

2026-09-11 14:24:17 -07:00

parent 39a7541b63

commit aa3dd9f1fb

6 changed files with 556 additions and 2 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

public/_next/static/chunks/0gvr7_lt8~_gd.js

+1 -1

File diff suppressed because one or more lines are too long