Cookie policy
Last updated: 2026-06-20
This policy describes what cookies are, the types we use, their purpose and how you can manage them. For users in the United Kingdom, cookie use is also governed by the Privacy and Electronic Communications Regulations (PECR) in addition to UK GDPR.
1. What is a cookie?
A cookie is a small text file that a website stores in your browser with information about your visit. It allows the site to remember preferences, keep your session active and gather usage statistics.
2. Cookies we use
Below is a detailed list of the cookies used, grouped by category:
- Technical or strictly necessary (no consent required): `cookie-consent` (HttpOnly, 365 days — stores your cookie choice); `next-auth.session-token` (HttpOnly, session — authentication); `NEXT_LOCALE` (30 days — preferred language).
- Product analytics (consent required): PostHog `ph_*` (localStorage, 365 days — anonymous usage analytics, EU server); Google Analytics `_ga`, `_ga_*` (730 days — web analytics).
- Marketing (consent required): no proprietary cookies currently. Meta Pixel or Google Ads cookies may be activated if campaigns are enabled.
- Functional (consent required): Stripe `__stripe_mid`, `__stripe_sid` (session/1 year — payment fraud prevention).
3. Third-party cookies
Third-party cookies may be installed (Stripe for payments, MapTiler for maps, Firebase for notifications) when necessary for service operation. Stripe may use its own fraud-prevention cookies. Google Analytics and PostHog only set cookies when you have accepted the 'analytics' category.
4. Management and withdrawal
You can accept, reject or customise cookies in the consent banner shown on your first visit. You can change your choice anytime from the "Configure cookies" link in the footer.
You can also manage cookies from your browser settings (Chrome, Firefox, Safari, Edge).
5. Retention
Technical cookies are kept for the session or until their purpose is fulfilled. The consent record is kept for 12 months, after which consent will be requested again. See the table in section 2 for specific cookie lifespans.