Cookie notice
Last updated: [date of publication]
A cookie is a small file a website saves in your browser. We only use cookies that our site needs to work. We don't use cookies for advertising or tracking, and we don't use analytics cookies.
Because these cookies are needed for the site to work, the law doesn't require us to ask first. That's why you don't see a cookie banner.
The cookies we use
All of these are our own cookies. None of them are shared with other websites.
| Cookie | What it does | How long it lasts |
|---|---|---|
| `sb-[project-ref]-auth-token` | Keeps you signed in, so your book and order stay with you. It's also used before you sign in, so you can start a book without an account. Large values may be split into `sb-[project-ref]-auth-token.0`, `.1` and so on | Up to 400 days, renewed while you use the site [the sign-in library's default; to confirm or shorten before launch] |
| `sb-[project-ref]-auth-token-code-verifier` | Keeps the sign-in link safe, so only the browser that asked for it can use it [confirm the sign-in flow sets it] | Until you finish signing in [confirm] |
| `NEXT_LOCALE` | Remembers your language when it's different from your browser's language | Until you close your browser |
| `[gift code cookie name]` | Passes your new gift code safely to the page that shows it to you, once. Its contents are locked so only our server can read them | 30 minutes, and deleted as soon as the page has read it |
| `[device cookie name]` | A random code that helps us stop misuse, such as people guessing gift codes. We scramble it before we store it, and it doesn't identify you | [Time to be confirmed when it's built] |
`[project-ref]` is the short name of our database. [Fill in before launch.]
The sign-in cookies can only be read by our server, not by scripts on the page. They're only sent over secure connections.
Other websites
When you pay, you go to a secure page run by Stripe. That page is on their website, and they may set their own cookies there under their own cookie notices. We don't put their cookies on our site.
Other ways we store things in your browser
We don't use local storage or similar tools to track you. [Confirm before launch that no page stores anything else in the browser.]
Our visit counts use no cookies and no personal data. Our error reporting tool doesn't set cookies.
If we add other cookies
If we ever want to use cookies that aren't needed for the site to work, such as for analytics, we'll ask you first. We'll:
- set nothing until you choose;
- make "Accept" and "Reject" equally easy;
- let you change your mind at any time;
- update this notice and its date.
How to control cookies
You can block or delete cookies in your browser's settings. If you block the cookies above, you won't be able to sign in, make a book or pay.
Questions
Write to us at [privacy email]. Our privacy notice explains how we use your data.