This notice describes browser storage, form-security validation and optional measurement used by the GDF website. Cloudflare Web Analytics remains off until the visitor allows Analytics.
What the site uses today
Scroll horizontally to view all table columns.
| Name | Type | Purpose | Duration |
|---|---|---|---|
gdf_privacy_preferences | First-party local storage; strictly necessary | Records the policy version, time of choice, optional categories allowed or declined, and whether Global Privacy Control was honored. It is not used for analytics, advertising or profiling. | Up to 180 days; removed sooner if you clear browser storage. A material policy change invalidates it. |
| Hosting and security logs | Server-side technical records, not browser cookies | Deliver the site, maintain reliability, prevent abuse and analyze security events. | Controlled by documented operational, security and legal retention criteria. |
| Cloudflare Turnstile | Strictly necessary form-security service on the contact and privacy-rights forms | Helps distinguish automated submissions from legitimate form requests. Turnstile is not used for analytics, advertising or cross-context tracking. | Each response token is used for one server-side security check and expires after a short period. Related service data follows Cloudflare's documented operational, security and legal retention criteria. |
| Cloudflare Web Analytics | Consent-based JavaScript beacon; no analytics cookies, local storage or browser fingerprint | Measures aggregate visits, referring sites, device and browser categories, page paths, navigation types and page-performance metrics after Analytics is allowed. | Cloudflare documents seven days of unsampled beacon data before aggregation and up to six months of Web Analytics reporting. |
Optional categories
Necessary form security: Cloudflare Turnstile on the contact and privacy-rights forms. It operates independently of optional consent because it protects the requested form service. Functional: enhanced features that remember optional preferences; none are installed. Analytics: Cloudflare Web Analytics, which loads only after Analytics is allowed. Advertising and cross-context sharing: advertising or tracking across services; none is installed.
How consent works
On a first visit, “Decline optional” and “Allow optional” are equally available in one step. No optional category is preselected. Choosing “Manage choices” provides category-level control. Consent lasts no more than 180 days and may be withdrawn as easily as it was given by opening from any page.
The site does not condition access on optional consent. Declining has no effect on the core experience. If a browser sends Global Privacy Control, GDF treats it as an opt-out of sale or sharing and keeps advertising and cross-context sharing off. The site does not display a consent pop-up merely because a GPC signal was received.
Browser controls and contact
You can also delete local storage or block cookies in browser settings. Doing so may remove the saved privacy decision, causing the site to ask again. Questions may be sent to privacy@evestigate.com or raised by calling 1-800-868-8189.
Last updated: September 5, 2026.