Cookies at Genesis

This policy describes the small files and browser storage used by Genesis. We use a necessary cookie choice record and may use privacy-conscious analytics only when a reader accepts optional cookies.

1. Cookie category and reader choice

Essential session information supports navigation and security and normally expires when the browser closes. The cookieChoice browser record remembers whether a reader selected Accept or Reject and is retained until it is cleared. Optional analytics identifiers, when enabled, may remain for up to 13 months and are used in aggregate to understand page performance rather than to build a medical profile. We do not use cookies to infer diagnoses, sell personal information or target sensitive health categories. Browsers can block or delete cookies, although some functions may then behave differently. Third-party services, if introduced, must document their own retention and security practices. Genesis reviews cookie settings during its annual policy review. Questions can be sent to the Jakarta office, and requests for access or deletion are answered within 30 calendar days. This policy was dated 1 January 2026 and reviewed on 1 June 2026.

What cookies are. A cookie is a small text file that a website asks your browser to store. Browser storage such as localStorage works in a similar way and is covered by this policy. Some items are needed for the page to function, while others only appear if you agree. Cookies set by Genesis are first-party; anything set by another domain is third-party and is listed below if it is ever used.

1. First-party: set by the Genesis domain.
2. Third-party: set by another service, currently none by default.
3. Session or persistent, depending on how long they last.

Scope of this policy. The policy covers every page of the Genesis site, including the contact form and the downloadable resources listed on the resources page. It does not cover websites reached through external links, which have their own cookie notices. Technologies similar to cookies, such as pixel tags and device identifiers, are covered in the same way, although the site does not currently use pixel tags. If a page ever behaves differently from the description given here, readers can report it through contact.php.

1. Applies to all Genesis pages and forms.
2. Excludes linked external websites.
3. Covers similar technologies in the same way.

Cookies and storage items in use. The table-style list below describes each item by name, purpose and lifespan. Names are those used by the Genesis site and may be shown in your browser developer tools.

1. GENSESSID (essential, session): supports navigation and form security; deleted when the browser closes.
2. cookieChoice (preference): records Accept or Reject; kept until you clear it.
3. _gn_a (analytics, optional): aggregate visitor identifier; up to 13 months.
4. _gn_s (analytics, optional): groups page views into one visit; 30 minutes after the last activity.

Reading the cookie list. Each item above is described by its name, its owner, its purpose and its lifespan so that a reader can compare the list with what a browser shows. A session item disappears when the browser is closed, whereas a persistent item remains until its expiry date or until it is deleted. The expiry periods given are maximums, and the actual period may be shorter if a reader clears site data. Where a browser displays a slightly different name, the purpose and lifespan are the reliable way to match the entry.

1. Name: the label shown in browser developer tools.
2. Purpose: essential, preference or analytics.
3. Lifespan: the maximum time before expiry.

Essential items. Essential items cannot be switched off through our banner because the site would not work without them. They do not record browsing history for advertising and are not combined with other data. They exist to keep a form submission attached to the correct visit and to protect it against forged requests. If your browser blocks them, the contact form may return an error message.

1. Security of form submissions.
2. Consistent navigation during a visit.
3. No advertising or profiling use.

Where essential items are stored. The essential session item is set only after a reader opens a page that requires form protection, such as the contact page. It contains a random value and does not hold a name, an email address or any message text. The server that handles the contact form is hosted in a data centre in Jakarta or Singapore, and the item is only sent back to that server. When the browser closes, the value is discarded and cannot be used to recognise the same reader later.

1. Random value only, with no personal details.
2. Sent only to the Genesis server.
3. Discarded when the browser closes.

Optional analytics. If you press Accept, we may load a privacy-conscious analytics tool that reports counts of page views, approximate region, device class and referring page. The data is used in aggregate to find slow pages, unclear navigation and accessibility problems. IP addresses are shortened before storage where the tool supports this. If you press Reject, no analytics identifiers are set and the choice is remembered in cookieChoice.

1. Purpose: improve readability and performance.
2. Maximum identifier lifespan: 13 months.
3. Not used to infer health conditions.

What analytics reports include. The optional analytics reports contain counts of page views, time on page, approximate city or province, browser type and the page that referred the reader. They do not contain names, email addresses or the text of messages. Reports are reviewed by the editorial team once a month to decide which articles need clearer headings or faster images. Raw analytics events are deleted after 14 months, and aggregated monthly totals that cannot identify a person may be kept longer for trend comparison.

1. Page views, referrers and device class.
2. Raw events deleted after 14 months.
3. Aggregated totals contain no personal identifiers.

Changing your mind. You can change your selection at any time by deleting the cookieChoice record in your browser settings, after which the banner appears again on your next visit. Deleting the analytics items removes the identifiers already stored on your device. On a shared computer, you may prefer to use a private browsing window, which discards cookies when it is closed.

1. Open browser settings and find site data for the Genesis domain.
2. Delete cookieChoice to see the banner again.
3. Delete _gn_a and _gn_s to remove analytics identifiers.

How to withdraw consent step by step. Withdrawing consent is as easy as giving it. In most desktop browsers, open the site information icon next to the address, choose cookies or site settings, and remove the Genesis entries. On mobile, the same option is found under the browser privacy or site data menu. After removal, the banner appears again and a Reject choice stops any analytics identifier from being set. Data already collected in aggregate is not affected, because it can no longer be linked to a device.

1. Desktop: site information icon, then cookies.
2. Mobile: privacy or site data settings.
3. Choose Reject on the next banner to keep analytics off.

Browser controls. Most browsers let you block all cookies, block only third-party cookies, or clear them when you close the browser. Instructions are available in the help section of each browser. Blocking essential items may stop the contact form from working, but reading articles will normally remain possible. Mobile browsers have similar controls under privacy settings.

1. Block or allow by site.
2. Clear on exit.
3. Use private mode for temporary visits.

Browser behaviour you may notice. Some browsers limit the lifespan of cookies automatically, so an analytics item may expire earlier than the maximum stated. Privacy extensions may also block analytics, in which case the site continues to work normally and no report is generated. A reader who uses several devices will appear as separate visitors, because the identifiers are not linked across devices. These differences are expected and do not affect access to articles.

1. Automatic browser limits can shorten lifespans.
2. Blocking extensions do not break article pages.
3. Separate devices are counted separately.

Third-party services. At present Genesis does not embed advertising networks, social sharing buttons or video players that set their own cookies. If this changes, the service will be named on this page, its purpose and lifespan will be described, and optional items will only load after you accept. Embedded maps or videos, if added, will be loaded on request rather than automatically.

1. No advertising cookies at present.
2. Any new service announced here before use.
3. Optional items require consent.

Possible future services. Should Genesis add an embedded map for the contact page, a video player or a newsletter tool, the cookie inventory would be extended before the feature goes live. The notice would give the provider name, the country where data is processed, the purpose, the lifespan and a link to the provider notice. Optional services would stay off until a reader accepts them. Advertising and cross-site tracking cookies are not planned, and their introduction would require a clearly dated revision of this policy.

1. Provider, country and purpose named in advance.
2. Optional services default to off.
3. Change recorded in the change log.

Legal basis and related rights. Essential items rely on our legitimate interest in running a secure site. Optional items rely on your consent under Indonesian personal data protection rules. You may withdraw consent at any time, and requests for access or deletion of data connected to cookies are answered within 30 calendar days. Information about how we handle other personal data is in the privacy policy.

1. Consent for analytics.
2. Legitimate interest for essential items.
3. Rights exercised through contact.php.

Legal framework. The handling of cookie data follows Law No. 27 of 2022 on Personal Data Protection, Law No. 11 of 2008 on Electronic Information and Transactions as amended, and Government Regulation No. 71 of 2019 on the operation of electronic systems. Consent for optional items is requested through a banner that offers Accept and Reject with equal prominence. Records of the choice are limited to the cookieChoice item and do not include the identity of the reader. Supervisory questions can be directed to the Indonesian authority responsible for personal data protection.

1. Accept and Reject given equal prominence.
2. Choice stored locally in cookieChoice.
3. Applicable Indonesian regulations listed.

Signals, children and complaints. Browser signals such as Global Privacy Control are treated as a Reject choice for optional analytics where the browser sends them. The site is not directed to under-18s and does not knowingly set optional cookies for them. Complaints about cookie practices can be sent to the Jakarta office at Jl. Sudirman 12, Jakarta Pusat, DKI Jakarta 10220, Indonesia, or by telephone on +62 813 5792 4680, and are acknowledged within 5 working days.

1. Privacy signals respected for optional items.
2. No profiling of minors.
3. Complaints acknowledged within 5 working days.

Data transfers linked to analytics. If the analytics tool is operated by a provider outside Indonesia, aggregate event data may be processed in Singapore or another country with comparable safeguards. Transfers are limited to the data described above and are covered by a written processing agreement that restricts the provider to Genesis instructions. Readers who prefer that no data leaves Indonesia can choose Reject, which prevents the analytics tool from loading at all. Details of any named provider are added to this page before the tool is activated.

1. Possible processing in Singapore under a written agreement.
2. Provider restricted to Genesis instructions.
3. Reject prevents any transfer from analytics.

Review and change log. The cookie inventory is checked during each policy review and whenever a new feature is added to the site. Each change is dated so that you can see what was added or removed.

1. 1 January 2026: first issue listing session, preference and analytics items.
2. 1 June 2026: lifespans stated per item and browser controls explained.
3. Next review within twelve months or earlier if a new service is introduced.

Contact and response procedure. Questions about cookies can be sent through contact.php, by telephone on +62 813 5792 4680 or by post to the Jakarta address above. Each enquiry receives an acknowledgement within 5 working days and a substantive reply within 30 calendar days. If a reader remains dissatisfied, the matter can be escalated to the editorial lead, who reviews it again and replies in writing. Readers also keep the right to approach the competent Indonesian authority at any time.

1. Acknowledgement within 5 working days.
2. Reply within 30 calendar days.
3. Escalation to the editorial lead on request.