Cookie policy

Strictly necessary storage

When you sign in to the client area or Mission Control, your session token is stored in your browser’s local storage by our authentication provider (Supabase). This is technically local storage rather than a cookie, but it falls in the same family: it is strictly necessary for sign-in to work, lasts for the duration of your session, and is never used to track you across other websites. Under the UK’s Privacy and Electronic Communications Regulations (PECR), strictly-necessary storage like this does not require consent.

How we count visits

We use Vercel Web Analytics, provided by the company that hosts this site, to see which pages are being read. It sets no cookies and writes nothing to your browser. Instead of storing an identifier on your device, it counts a visit using a hash made from the request itself, which is discarded after 24 hours — so it cannot follow you from one day to the next, and it cannot follow you to any other website.

What is recorded with each page view: the page address, the site that referred you, your approximate location (country, region and city), your browser, operating system and device type, and the time. Your IP address is not stored against it, and none of it is joined to your name, your email or any enquiry you send us.

Because nothing is stored on your device and nobody is identified, this does not require your consent under PECR. It runs for every visitor, including anyone who says no to the section below.

Google Analytics — only if you say yes

We also use Google Tag Manager, which is a container: on its own it stores nothing and measures nothing. What we put inside it is Google Analytics, and that does store an identifier in your browser so it can tell a returning reader from a new one. That is why you were asked.

Until you answer, nothing in that container is allowed to store anything. We do this with Google’s Consent Mode, set to deny on every page before Tag Manager loads, so the question is settled before any tag can act — not afterwards. If you say no, it stays denied and no identifier is written. Saying no changes nothing else about the site.

If you say yes, Google Analytics records:

• The pages you view on this site and the order you view them in
• How you arrived — a search, a link from another site, or typed directly
• Your approximate location, from your IP address, to city level
• Your device, browser and screen size
• An identifier that recognises the same browser on a later visit, kept for up to two years

We do not join any of that to your name, your email or an enquiry you send us, and we do not use it to advertise to you. Your answer itself is remembered in your browser’s local storage — that one is strictly necessary, because without it we would have to ask you again on every page.

Third-party requests

When you view a map, your browser fetches map tiles directly from OpenStreetMap’s servers. These requests do not set cookies, but OpenStreetMap does see your IP address — see the OpenStreetMap Foundation privacy policy.

Managing cookies

The quickest way to change what we measure is the button above. Beyond that, you can control or delete cookies and site data at any time through your browser settings — clearing this site’s data also erases your answer, so the banner will ask again next time. Blocking strictly-necessary storage will prevent sign-in from working, but the rest of the directory will work as normal.