Cookie & embedded content notice

Effective November 4, 2026. Cookies are small browser records. Similar technologies include embedded players and analytics requests. This notice describes the technologies used by our directory; provider/security cookies can change with the service and your activity.

Account, form, and security cookies

• zdx_form_session: a first-party session cookie that binds form/security recovery to the visitor. It is Secure, HttpOnly, and SameSite=Lax. It expires with the browser session.
• wordpress_logged_in_* / wordpress_sec_*: authentication cookies used after sign-in. The contractor sign-in does not offer a persistent remember-me option. Browser session cookies and server-side authentication lifetimes apply; signing out clears the relevant authentication cookies.
• wordpress_test_cookie: a session cookie used by WordPress sign-in to check browser cookie support.
• wp-settings-* / wp-settings-time-*: WordPress user-interface preferences for authorized users, typically retained for up to one year. They can remain from earlier WordPress profile/admin visits.
• Hosting/CDN security cookies: Cloudflare or the hosting security layer may set cookies for security challenges or access control when needed. Their names and durations depend on the protection being used.

Blocking necessary authentication/security cookies can prevent sign-in or form submission. These cookies are used to provide requested functions, not as advertising permission.

Optional Google Analytics and Tag Manager

Google Analytics 4 is provided through Google Tag Manager only after you choose Accept analytics or enable analytics in Cookie preferences. Before that choice, and after rejection, the website does not load Google Tag Manager or Google Analytics or send them analytics requests. Advertising, remarketing, Google signals and personalized advertising are not enabled.

Consented measurements include page visits, contractor searches, profile views, successful registrations, email-confirmed inquiries and the first paid membership purchase. We exclude form contents, names, email addresses, telephone numbers, precise coordinates, verification links, raw search text and URL query strings from our analytics event payloads. Google receives technical connection/device information and pseudonymous analytics identifiers when enabled. See Google’s Privacy Policy.

• tcnm_consent: a first-party cookie storing your analytics choice and its date, retained for up to 180 days. It is used to remember your privacy preference, not to identify you for advertising.
• _ga / _ga_*: Google Analytics identifiers set only after analytics acceptance; the website requests a 60-day expiry, but Google may initialize its main _ga cookie for up to 400 days. Their actual presence and lifetime depend on the browser and Google’s implementation. Rejecting analytics removes accessible first-party analytics cookies. Analytics event/user data retention is set to two months; aggregate reporting can persist separately.
• tcnm_conversion: a Secure, HttpOnly, SameSite=Lax first-party receipt cookie, set only when analytics is accepted and a registration or inquiry is successfully completed. It expires within 24 hours and contains a random receipt token, not contact details.
• tcnm_sent_*: sessionStorage entries used after acceptance to prevent repeat conversion delivery within a tab. They last for that tab session. Pending conversion receipts become unavailable after 24 hours and are removed by the next daily cleanup job.

Accept and Reject are available together. Cookie preferences in the footer lets you change or withdraw your choice. Withdrawal removes accessible first-party Google Analytics cookies and reloads the page to unload Google tags. It stops future measurement; it does not erase data already received by Google. A detected Global Privacy Control signal blocks this optional Google analytics integration. Contact [email protected] for privacy requests.

Cloudflare Web Analytics is a separate hosting-level, cookie-free performance measurement service; these Google analytics controls do not disable Cloudflare network/security processing or its separately disclosed performance beacon. Cloudflare describes that service as not using analytics cookies, localStorage or fingerprinting. See Cloudflare Web Analytics.

Optional YouTube videos

We do not load a YouTube iframe or request a YouTube thumbnail before you choose to load a video. Selecting the video control connects your browser to youtube-nocookie.com and Google’s video infrastructure. YouTube receives connection information such as IP address and browser details and may use storage or cookies as you interact with its service. Its privacy-enhanced embed mode is not a promise of no third-party processing.

You can leave videos unloaded and use the rest of the listing. Watching on YouTube opens an external service governed by Google’s Privacy Policy. Any deployment requiring prior optional-content consent must show this disclosure before the load control and treat loading as a specific choice, not consent to unrelated tracking.

Stripe billing pages

Stripe scripts are not embedded in ordinary directory pages on ordinary directory pages. Choosing checkout or Manage subscription opens a Stripe-hosted page. Stripe may use cookies and related technology for payments, account features, security, and fraud prevention under its Cookie Policy. A directory cookie preference must not misleadingly claim to disable technology on an external Stripe page.

Your choices

Use Cookie preferences in the footer to accept, reject or withdraw optional Google Analytics. Essential website functions remain available when you reject analytics. Browser controls can remove cookies, and deleting cookies does not cancel a subscription. YouTube videos load only when you choose their separate video control; Stripe-hosted billing and browser device-location permission have their own notices and controls. Analytics consent does not enable those features or consent to advertising.