Cookies

Cookie and browser storage information

Analytics is off by default. Google Analytics loads on the canonical production website only after you explicitly accept it.

Storage used by the site

NameType and providerPurposeWhen usedDuration
ac_sessionStrictly necessary first-party cookie, 21Aircon portal/adminHolds an opaque, revocable session identifier. The underlying value is stored only as a hash and the cookie is not readable by page scripts.After successful customer or staff sign-in.Customer: rolling maximum 30 days. Staff: up to 8 hours. Signing out or revocation ends the server session.
ac_csrfStrictly necessary first-party cookie, 21Aircon portal/adminPrevents another site from submitting account changes on your behalf.After successful sign-in.Up to 30 days; it has no effect without a valid server session.
ac_xero_oauthStrictly necessary first-party cookie, admin onlyBinds a short-lived Xero authorisation response to the staff member and browser that started it.Only while an authorised finance user connects Xero.10 minutes and restricted to the callback path.
21ac_cookie_consentLocal storage, 21AirconSaves the analytics choice, policy version and save and expiry times.After you select accept or decline.180 days, or until the policy version changes or site data is cleared.
_gaFirst-party cookie, Google AnalyticsDistinguishes users for analytics reporting.Only after analytics is accepted on the canonical production website.Google's default is up to 2 years. Browser limits or an Analytics override can shorten this.
_ga_PXLEQSJ20HFirst-party cookie, Google AnalyticsPersists analytics session state for the configured G-PXLEQSJ20H property.Only after analytics is accepted on the canonical production website.Google's default is up to 2 years. Browser limits or an Analytics override can shorten this.

Legacy cleanup: the current site does not create attribution storage. On page load it removes the old 21ac_attrib session key and 21ac_estimate_state local-storage key if they were created by an earlier deployment.

Estimate planner: project answers and selected photos are kept in browser memory only for the open page. The planner does not persist them in local or session storage. If you choose to continue, a bounded text summary is placed in the browser URL fragment, imported by My21Aircon and removed from the visible URL. Photographs are not transferred.

Cloudflare security: sign-in and submission forms use Cloudflare Turnstile and server-side rate limits to distinguish legitimate use from automated abuse. Cloudflare may process short-lived device and network signals needed to provide that security service. These controls are not used for advertising.

Optional Google Analytics

After acceptance on https://www.21aircon.com, the site loads Google Analytics 4 from Google's tag service and sends a page view. It also records public-site journey events such as planner progress and clicks to the customer portal, telephone or email. Those events use the page path and broad action type; they do not include the telephone number, email address, customer message, quote reference or portal content. The private customer and staff applications do not use Google Analytics.

The site does not intentionally load Google Analytics on local, preview, non-canonical or HTTP versions.

Choosing decline does not load Google Analytics. Revoking a previous acceptance changes analytics storage to denied, stops the site's analytics event wrapper and attempts to remove cookies beginning _ga, _gid or _gat for the site. Browser or network behaviour can affect deletion, so browser controls remain the definitive way to clear stored site data.

Change your choice

If JavaScript is off, this site's analytics code cannot load and the settings button cannot open. Use your browser's site-data controls to remove any previously stored choice or analytics cookies.

Status and contact

Technical information updated 24 July 2026. See the privacy notice. Questions can be sent to hello@21aircon.com or raised by calling 01635 534810.