Cookie Policy

1. The short version

We set three cookies, all of them strictly necessary: one that remembers your session, one that protects forms from being submitted by another site on your behalf, and one that only exists if you asked us to keep you signed in.

We also run Google Analytics 4, which sets two further cookies. It tells us how people find and read the site, and we use it for advertising as well as measurement: it builds audiences we can advertise to on Google, which means that after visiting this site you may be shown our ads on Google Search, YouTube or sites in Google’s display network. Google Signals is on, so where you are signed in to a Google account, Google may connect this visit with your activity on your other devices. We do not run social-media pixels or data-broker tags.

2. The cookies we set

All three are first-party cookies, set by this site for this site:

Blocking these cookies is your choice, but the site will not work properly without them: you will not be able to sign in, submit the waitlist form or complete a checkout.

• Session cookie — holds a random identifier for your visit. It is what lets the site know that the page you are reading now and the form you submit next belong to the same person. It is how you stay signed in, and it carries your language choice and your progress through checkout. It expires after two hours of inactivity, or when you close your browser.
• CSRF token cookie (XSRF-TOKEN) — a security token proving that a form was submitted from our page and not from another site pretending to be you. Same lifetime as the session.
• Remember-me cookie — set only if you tick “remember me” when you sign in, so you do not have to sign in again on your next visit. It lasts until you sign out or it expires. If you never tick the box, it is never set.
• Google Analytics cookies (_ga and _ga_TZPVY14G44) — set by Google Analytics 4 to tell one visit apart from another and one returning reader apart from a new one, and to build the advertising audiences described in section 6. Both last two years. They are the only cookies on this list that are not strictly necessary, and blocking them costs you nothing on this site.

3. Your language is not a separate cookie

Whether you are reading in Arabic or English is decided by the address you are on — the plain address is Arabic and the “/en” version is English — and your last choice is remembered inside the session cookie above, so that the checkout and your account come up in the same language. There is no separate language cookie to accept or refuse.

4. What we do not set

For the avoidance of doubt, and as of the date at the top of this page, this site sets none of the following:

• advertising or tracking cookies from anyone other than Google (the two Google Analytics cookies named in section 2 are the only non-essential ones we set; the identifiers our payment provider may set on the checkout page are for payment security and fraud prevention, and are described in section 5);
• advertising, retargeting or conversion-tracking pixels;
• social-media sharing or “like” trackers;
• third-party profiling or data-broker tags;
• any cookie that follows you across other websites.

5. Requests the pages make to other companies

Cookies are not the only way a page can reveal something about you. For completeness, these are the requests our pages make outside our own servers:

• Google Fonts — the two typefaces the site is set in are downloaded from fonts.googleapis.com and fonts.gstatic.com. No cookies are set, but the request itself tells Google your IP address and which browser you are using.
• Our video — served from our own server on our own domain, not from a third-party video platform. No third party learns what you watch.
• Our payment provider — its script is loaded on the checkout page to take your payment securely and to help prevent fraud, and for some payments you go on to the provider’s own pages. It may set cookies or similar identifiers, and collects signals about your device and browser, under its own cookie and privacy policies. It is not loaded on the rest of the site.

6. Analytics, and your choice about it

We use Google Analytics 4 to understand how people arrive at this site, which pages they read, and who our audience is. We also use it for advertising: it can build audiences from people who have visited this site, which we use to run ads on Google’s networks. It is the only non-essential thing running on these pages.

We are not showing you a consent banner for it, and you should know that rather than have it left unsaid. This is a Malaysian site under the PDPA, and the data is used to improve this site and to advertise it, not sold to anyone. There is one exception we make on purpose: if you are visiting from the European Economic Area, the United Kingdom or Switzerland, analytics and advertising storage are switched off before the page loads and stay off, because Google requires your consent first in those countries and we are not asking for it. Everywhere else, if you would rather not be counted, every major browser can block these cookies for this site, and browser-level tracking protection or an ad blocker will stop the tag loading at all. Section 7 explains where those controls are. Nothing you lose by blocking them affects your ability to use the site, sign in, or buy anything.

7. Managing cookies in your browser

Every major browser lets you see, block and delete cookies from its settings, usually under “Privacy”. Blocking cookies from this site will stop you signing in and stop checkout from completing, because there would be nothing to carry your session from one page to the next.

8. Contact us

Questions about this policy: info@malaysiapropertyguide.com.

How we handle personal data generally is set out in our Privacy Policy.