Cookie
Policy.
This Cookie Policy explains how Manifesto Agency (Registration No. 202603059119 (003829903-D)), a sole proprietorship registered in Malaysia (“Manifesto”, “we”, “us”), uses cookies and similar technologies on manifestoagency.co, what each one does, how long it lasts, and how you change your mind.
Read it alongside our Privacy Policy, which explains your rights over the personal data these technologies generate.
1. What cookies are
Cookies are small text files placed on your device when you visit a website. They let a site remember your actions and preferences over time.
We also use technologies that work like cookies but are not technically cookies:
- Local storage and session storage — data stored in your browser, sometimes for longer than a cookie would last.
- Pixels and tracking beacons — tiny transparent images that register when a page or email has been opened.
- Software development kits and scripts — code from third parties that runs on our pages and can read or set its own identifiers.
Where this policy says “cookies”, it means all of these.
First-party cookies are set by us. Third-party cookies are set by another company whose service runs on our site — an analytics provider, for example. We control the first; we can only choose whether to load the second.
2. Your choices, and how consent works here
When you first visit our site you will see a consent banner. Nothing except strictly necessary cookies is set until you make a choice. You can:
- Accept all — we set every category described below.
- Reject all — we set only strictly necessary cookies, and the site keeps working.
- Manage preferences — you choose category by category.
You can change your choice at any time using the Cookie settings link in our site footer. Withdrawing consent is as easy as giving it, and takes effect immediately for future processing.
Rejecting non-essential cookies will not lock you out of the site. Some conveniences — remembering your preferences between visits, for example — will not work.
We keep a record of your consent for 12 months, as evidence that we obtained it. That record is itself a strictly necessary cookie (mfst_consent).
3. Cookie categories
3.1 Strictly necessary cookies
These make the site work. They enable page navigation, security, and remembering your cookie choices. Without them the site cannot function as you would expect.
These are set without consent, because the site cannot be provided without them. They are first-party, and they do not track you across other websites.
Legal basis: necessary for the provision of a service you requested — Art. 6(1)(b) GDPR; permitted without consent under the PDPA as necessary for the provision of the service.
| Cookie | Purpose | Duration |
|---|---|---|
mfst_consent | Stores your cookie preferences | 12 months |
3.2 Functionality cookies
These remember choices you make — your language, your region, whether you have dismissed a notice — so the site behaves consistently for you. They collect limited information and do not follow you to other websites.
We do not currently set any functionality cookies. If we add them, they will be listed here and will load only after you consent to this category.
Legal basis: your consent — Art. 6(1)(a) GDPR.
3.3 Performance and analytics cookies
These tell us how the site is used so we can improve it: which pages are visited, how long people stay, how far they scroll, what they click, and roughly where in the world they are. We look at this in aggregate — we are trying to find out which pages fail, not who you are.
We use Google Analytics 4, provided by Google LLC, deployed through Google Tag Manager. The Google Tag Manager script is not loaded at all until you consent to this category. We have IP anonymisation enabled, and we keep Google Signals and ad-personalisation features off unless you separately consent to marketing.
Legal basis: your consent — Art. 6(1)(a) GDPR.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics | Distinguishes unique users | 2 years |
_ga_<container-id> | Google Analytics | Maintains session state | 2 years |
Google may set additional cookies as it updates Analytics; the current list is documented by Google. You can also opt out of Google Analytics independently of our banner by installing Google’s opt-out browser add-on at tools.google.com/dlpage/gaoptout. Google’s privacy policy is at policies.google.com/privacy.
3.4 Third-party embeds
Our contact page embeds a scheduling tool so you can book a discovery call. It is served from our own subdomain, cal.manifestoagency.co — a self-hosted instance of Cal.com that we operate. It loads only on the contact page, because scheduling is the purpose of that page, and it may set its own cookies to manage the calendar. It is not loaded anywhere else on the site, and it is governed by this policy and our Privacy Policy.
4. Social media links
We link to our profiles on LinkedIn and X. These are plain links, not embedded plugins — no data goes to those platforms until you click, at which point you leave our site and the platform’s own privacy policy applies.
If we add social sharing buttons or embeds in future, we will update this policy and gate them behind consent.
5. How long cookies last
Session cookies are deleted when you close your browser. Persistent cookies stay on your device until they expire or you delete them.
The duration of each cookie is listed in the tables above. Durations are set by whoever sets the cookie — for third-party cookies, that provider may change the duration without telling us, and we review the tables periodically.
6. Managing cookies in your browser
Independently of our banner, you can control cookies in your browser settings — block all, block third-party only, delete existing cookies, or ask to be notified when one is set.
- Chrome — support.google.com/chrome/answer/95647
- Safari — support.apple.com/en-my/guide/safari
- Firefox — support.mozilla.org
- Edge — support.microsoft.com/microsoft-edge
Blocking all cookies at browser level will break parts of this site and most others.
Most browsers also offer a Do Not Track setting. There is still no agreed industry standard for how sites should respond to it, and we do not currently respond to Do Not Track signals. We say so plainly rather than implying otherwise. Our consent banner gives you the control that Do Not Track was meant to provide.
7. Cookies and your personal data
Some cookie data — an IP address, or a unique identifier — is personal data. Where it is, the Privacy Policy applies in full, including your rights of access, correction, erasure, objection, and portability, and our rules on international transfers and retention.
To exercise any of those rights, email privacy@manifestoagency.co.
8. Changes to this policy
We update this policy when we add, remove, or change the technologies we use. The “Last updated” date at the top shows the current version. If we add a new category of cookie, we will ask for your consent again rather than relying on the consent you gave previously.
9. Contact
Questions about this policy, or about a specific cookie:
Manifesto Agency
Registration No. 202603059119 (003829903-D)
Kuala Lumpur, Malaysia
privacy@manifestoagency.co
10. Language
This Cookie Policy is published in English, which is the governing version. Where we provide a Bahasa Malaysia translation, the English version shall prevail in the event of any conflict between the two.