Draft — pending legal review
Cookies
Bolton Vouched doesn't show a cookie banner because it doesn't need one. UK law (the Privacy and Electronic Communications Regulations) asks for your consent before a site stores things on your device, except when they are strictly necessary for a service you asked for. Everything this site stores is in that group.
Just looking
If you browse the site, look at listings or tap Call or WhatsApp, we set no cookies at all. There is no advertising and no tracking across other sites.
Signing in
When you sign in (to leave a review, reply as a provider, or as the admin), our sign-in provider, Supabase, sets the cookies below on this site. They are strictly necessary: without them you can't stay signed in. They are only set once you sign in, and only used for signing in.
| Name | What it's for | How long |
|---|---|---|
sb-…-auth-token (sometimes split into …-auth-token.0, .1) | Keeps you signed in, so you can leave or reply to reviews and use your account page. | Until you sign out or delete your account. Your browser keeps it for at most 400 days. |
sb-…-auth-token-code-verifier | Only while you sign in with Google: a one-time check that the sign-in you finish is the one you started. | Until Google sends you back to us, when it's used and deleted. |
Things saved on your device
Two things are kept in your browser's own storage (local storage), never sent to us and never used to track you. Both are things you asked for:
bv-theme: whether you chose the light or dark look. It stays until you clear your browser's data.bv-review-draft:…: a review you've started writing, so it isn't lost if the page reloads or your signal drops. It's cleared once the review is posted.
Security checks
On the sign-in page, the admin login and the Get listed form we use Cloudflare Turnstile to check that a person, not a script, is sending the form. To do that, Cloudflare may look at signals from your device and browser. Cloudflare handles that information under its own privacy policy, at cloudflare.com/privacypolicy. Turnstile is only used on those three forms.
Counting visits
If it's switched on, we use Cloudflare Web Analytics to count page views. It sets no cookies, doesn't build a profile of you and doesn't follow you to other sites. We see totals, such as how many times a page was viewed, not who viewed it. It's not used on the admin pages.
Questions
The privacy notice explains what personal information we keep and why.