This site sets no cookies.
Not "essential cookies only". None. There's no analytics package, no tracking pixel, no tag manager, no advertising script and no fonts loaded from somebody else's server. That's why you've never seen a consent banner here, and why there's no preferences panel to fiddle with: there's nothing to consent to and nothing to turn off.
There is one thing worth knowing about, and it's the Google map at the bottom of the home page. Section 04 covers it properly.
Last updated: 3 August 2026
In one paragraph, without the jargon.
A cookie is a small piece of text a website asks your browser to keep and hand back on your next visit. Useful ones remember you're logged in or that you're mid-checkout. The ones people object to are the ones set by a company that isn't the site you're on, which use that handed-back text to follow you between sites and build a picture of you.
Session cookies vanish when you close the browser. Persistent ones sit on your device until they expire or you clear them. This site asks your browser to keep neither.
Plain files, sent once, and then the browser is left alone.
Every public page here is a single self-contained file. The pictures and the icon come from the same server. The typefaces are the ones already on your device. All the code that runs is written into the page itself, and its only jobs are the animation behind the boxes, the panel that opens the enquiry form, and turning what you type into a text message or an email in your own app.
None of that identifies you, follows you or reports back anywhere. Nothing on this site phones home.
Some plain consequences of building it that way: no consent banner, because there's nothing to consent to. No advertising profile, because I don't run advertising. No "we share data with our partners", because there are no partners.
The Google map on the home page is Google's, not mine.
Near the bottom of the home page there's an embedded map showing the area I work in. That map is a frame served by Google, and it loads when the page loads.
That means Google receives your IP address, your browser details and the fact that you loaded that page, and Google may set its own cookies against your browser, under Google's rules rather than mine. It happens whether or not you touch the map, and it happens on the home page only. This page, the privacy policy, the terms, the offers page and the audit page carry no map and no embedded third party content of any kind.
I don't receive anything from it. I don't get a report, a visitor count or a list of who looked. Google's own terms are the ones that govern what Google does with it, and they're at policies.google.com/privacy.
If you'd rather Google didn't see that, block third party frames or third party cookies in your browser, or use a content blocker. The rest of the home page works normally without the map.
Nothing loads until you click it.
The site links out to a few places: my LinkedIn, GitHub, TikTok and Facebook profiles, my Google Business Profile, the three client sites shown as work, and Google's PageSpeed report for each of them.
These are ordinary links. No content is pulled in from any of them, and no request goes to any of them while you're just reading. The moment you click, you're on their site under their rules, and whatever they do with cookies is between you and them.
There is exactly one entry, and a normal visit never creates it.
The moving background on the public pages is a simulation with a lot of dials on it. There's a hidden tuning panel I use to adjust those dials, and it opens only if you deliberately add #admin to the end of the address. That panel, and only that panel, can save the settings into your browser's local storage under the name oscar-sim-config.
Loading a page reads that entry to see whether settings were saved. It never writes one. So unless you've gone looking for the tuning panel and pressed save yourself, nothing is stored on your device by this site at all.
If you did create one and want it gone, clearing site data for oscarchapman.com.au in your browser removes it. It holds numbers and colours. It holds nothing about you.
The one record that does exist, kept on my side rather than yours.
The web server that sends you these pages keeps an access log: IP address, time, the page requested, and the browser identification string. That's a record on my server, not something placed on your device, and it can't follow you to another website.
I use it to check the site is up and to work out what broke when something breaks. It isn't analytics and it isn't advertising. The privacy policy covers how long it's kept and who can reach it.
Worth doing for the rest of the web, even though this site needs none of it.
- Chrome. Settings, then Privacy and security, then Third-party cookies.
- Safari. Settings, then Privacy, where "Prevent cross-site tracking" is on by default.
- Firefox. Settings, then Privacy & Security, then Enhanced Tracking Protection.
- Edge. Settings, then Cookies and site permissions.
Blocking everything on this site costs you the map at the bottom of the home page. Nothing else here changes.
Honoured by default, because there is no tracking to stop.
Some browsers send a "Do Not Track" or Global Privacy Control signal. Plenty of sites ignore them. I don't have to read them, because there's no tracking here to switch off in the first place. You get the same pages either way.
You'll be told before it does, not after.
If I ever add analytics, a booking widget, a chat box or anything else that sets a cookie, this page gets updated before that thing goes live, and it will name the thing and say what it does. If it needs your consent, you'll be asked for it properly rather than nudged into it by a dark grey "reject" button.
Questions about any of this: text 0412 517 647 or email oscarjameschapman@gmail.com.
Also here: the privacy policy and the terms of service.