We don't use cookies to track you. Our hosting sets two security cookies on every visit, and Stripe sets its own payment cookies only when you open checkout. All of them are strictly necessary.
Summary
UK law (PECR) covers cookies and anything similar that stores information on your device, including the browser storage we use. Most of what we store is strictly necessary for the site to work, and that is allowed without asking. Our visit counter is a statistics item. The law allows statistics storage without consent if we explain it clearly and give you an easy way to opt out, which we do. That is why the site has no cookie banner.
What we store on your device
| Name | Set by | Type | Purpose | When | How long | Category |
|---|---|---|---|---|---|---|
| __cf_bm | Cloudflare (our hosting network) | Cookie | Tells people apart from bots, to protect the site from automated abuse | Every visit | 30 minutes | Strictly necessary |
| __dpl | Our hosting platform | Cookie | Keeps your visit on one version of the site while we deploy updates | Every visit | Session | Strictly necessary |
| tenant-session | Us | sessionStorage | A random ID for this tab. It applies the 20-message chat limit and counts visits without identifying you. | Every visit | Until you close the tab | Strictly necessary (chat); statistics (visits) |
| flat-seed | Us | sessionStorage | Keeps Natasha's and Biscuit's movements consistent while you stay on the page | Every visit | Until you close the tab | Strictly necessary |
| flat.floorplan.folded | Us | localStorage | Remembers that you folded the floorplan panel | Only if you fold it | Until you unfold it or clear your browser data | Preference you chose |
| flat-no-stats | Us | localStorage | Remembers that you switched off visit counting | Only if you use the opt-out switch | Until you switch it back or clear your browser data | Strictly necessary |
| __stripe_mid | Stripe | Cookie | Fraud prevention for payments | Only when checkout opens | 1 year | Strictly necessary |
| __stripe_sid | Stripe | Cookie | Fraud prevention for payments | Only when checkout opens | 30 minutes | Strictly necessary |
| sb-…-auth-token | Us (Supabase) | localStorage | Keeps site administrators signed in | Admin pages only, not visitors | Until sign-out | Strictly necessary |
We don't use advertising, social media or cross-site tracking cookies. Our fonts and images load from our own hosting, not from third parties such as Google Fonts.
Stripe's cookies are covered by Stripe's cookie policy.
Your choices
- Switch off visit counting with the "Don't count my visits" switch on our Privacy Policy page.
- Global Privacy Control or Do Not Track: if your browser sends either signal, we don't count your visits. You don't need to do anything else.
- Clear or block storage in your browser settings. The site still works, but the chat may reset its message count and checkout may not load.
If we ever add cookies or storage that aren't strictly necessary or covered by the statistics rule, we will ask for your consent first and update this page.
Questions: decodengrow.com. More about how we use data is in our Privacy Policy.