Data on this site

Last updated: 17 September 2026

What this page is: a short, origin-specific summary of what fatcat.vikataylor.com itself does with your data. The full privacy policy, terms of use and cookie policy cover this site and every other site in the network, and they live on the legal hub: Privacy Policy, Terms of Use, Cookies and Local Storage. Where this summary and those documents differ, the documents govern.

1. Who runs this origin

fatcat.vikataylor.com is operated by Vika Taylor, an independent designer and creator. Contact: vika.taylor.one@gmail.com.

The site itself is a landing-page design demo for a restaurant that does not exist. “Fat Cat Dumplings”, its Haggerston address, its opening hours, its two nightly sittings and its menu are part of that fiction, the menu shows no prices because nothing is sold, and its telephone number is inside the block Ofcom reserves for use in drama. The only real party behind this origin is the person named above.

2. What this origin stores on your device

fc_consent (localStorage, not a cookie): your banner choice, when you made it and the version of the privacy policy you answered, as {choice:'granted'|'denied', ts:<epoch ms>, v:'2026-09-17'}. Kept for 180 days, or until that policy changes in a way that needs a new answer; then you are asked again. It is stored whichever way you answer, because remembering “no” is the only way to honour it.
cfz_google-analytics_v4, cfzs_google-analytics_v4 and cf_zaraz_client (cookies set by Cloudflare Zaraz, which runs Google Analytics for this site): set only after you press Accept, never before. The first holds the random analytics ID and lasts a year, the second counts page views in the current session, and the third is Zaraz's own working cookie and lasts a year. They are set for vikataylor.com, so every site in the network shares them, and they are HttpOnly, so no script on a page can read or delete them. While your choice here is Decline, this site does not run Zaraz, so nothing here reads them.
_zaraz_google_consent_update (localStorage): written by Zaraz after you press Accept. It holds the consent state passed to Google, analytics allowed and advertising not, and no identifier. This site's script deletes it if you decline.
Leftovers from the earlier set-up, until September 2026: the cookies _ga, _ga_*, _gid and _gat* and the storage entry _gcl_ls. This site's script deletes any it finds.

That is the whole inventory for this origin. There is nothing else in localStorage, no sessionStorage, and no cookie set by this site’s own code.

3. Who this origin talks to

Cloudflare (Cloudflare, Inc., USA): the host. Asking for any page gives Cloudflare your IP address and the usual request metadata, because that is how the page reaches you.
Cloudflare Zaraz and Google Analytics 4 (Cloudflare, Inc. and Google LLC, USA): only after Accept. Pressing Accept makes this site's own /consent.js start Zaraz, which is served from this site under /cdn-cgi/zaraz/ and runs Google Analytics on Cloudflare's servers, so your browser makes no request to Google. Zaraz tells Cloudflare the page address and title, the referring page, your screen and window size, colour depth, character set and time-zone offset. Cloudflare's servers pass Google the page view, this site's events, your browser's user-agent, your IP address and a random ID kept in a cookie, with the signal that analytics is allowed and advertising is not. Google uses the IP address to estimate an approximate location and states that Google Analytics 4 does not log or store IP addresses. Cloudflare acts as a processor, as it does for the hosting. Before Accept, and after Decline, this site sends nothing to Zaraz.
YouTube (Google LLC, USA), and only if you press play on the build video near the end of the home page. Until then the video is a still image served from this origin, and nothing is requested from YouTube or Google. Pressing play loads YouTube's player from www.youtube-nocookie.com, the privacy-enhanced embed domain, and the video then streams from Google's servers. From that moment Google receives what any website receives when your browser contacts it: your IP address, browser and device details, and the address of this site as the referring page (the site only, never the page path), which YouTube requires before its player will run. Google states that a view in this privacy-enhanced mode is not used to personalise your YouTube experience or the advertising shown to you outside this site. Inside its own frame the player may still store data in your browser under Google's domains; this site cannot read or remove it. Legal basis: your choice to press play after the notice shown under the player, GDPR Art. 6(1)(a). If you would rather not load the player here, use the Open on YouTube link next to it, which sends the same site address. If the page cannot embed the player, pressing play opens the video on youtube.com in a new tab instead.
Nobody else, before or after. Anton and Space Grotesk are served from this origin, so no request goes to fonts.googleapis.com or fonts.gstatic.com merely to render type. Every image on the page is served from this origin too, including the still of the build video. There is no CDN, no map, no social widget, no comment system and no third-party script of any other kind. The YouTube links in the header and the footer, and the red YouTube button under the build video, are ordinary outbound links: nothing loads from YouTube until you follow one.

4. Forms, bookings and purchases

There are none. This origin has no contact form, no newsletter box, no search field, no login, no booking engine and no checkout, so there is nothing here that can submit an email address or a payment detail. The restaurant is fictional: the “Book a table” buttons are ordinary telephone links to a drama-reserved number that cannot ring anyone, and nothing on this site can be booked, ordered or bought. If you write to me by email, that message sits in my mailbox and nowhere else, it is used only to reply to you, and you can ask me to delete it at any time.

5. Changing your mind

You can change or withdraw your choice at any time with the button, here or in the footer of every page on this origin. Withdrawing is exactly as easy as giving consent, which is the point. Declining after you accepted takes effect at once, without a reload: the page stops sending anything to Zaraz and deletes the _zaraz_ entry, and from your next page here Zaraz does not start at all. The Zaraz cookies are HttpOnly, so no page can delete them; they stay until they expire or you clear them, and nothing here reads them while your choice is Decline. Clearing cookies and site data for vikataylor.com in your browser removes fc_consent and the analytics cookies too.

6. Your rights, and the full documents

Access, correction, deletion, objection, withdrawal of consent, portability and the right to complain to your data-protection authority are set out in full, with the legal bases and the regional sections, in the network privacy policy:

Privacy Policy: what is processed, why, on what basis, and how to exercise your rights.
Cookies and Local Storage: the complete inventory across all the sites, and how the banner works.
Terms of Use: what you may do with the text, code and artwork published here.

To exercise a right, or to ask anything at all, email vika.taylor.one@gmail.com.

Note: this page is a plain-language summary of one origin’s data practices, not legal advice, and it deliberately states no retention period it cannot source. The retention periods, including the 14 months set for Google Analytics, are in the full policy.

← Back to Fat Cat Dumplings