Cookies & similar technologies
We use cookies, small files your browser keeps on your device, to make the site work and to learn what's useful. Here's what we use, and how to turn things off.
What is a cookie, anyway?
A cookie is a tiny file your browser stores when you visit a site. The next time you come back, the site can read it and remember things, like that you're signed in, or that you preferred the mobile preview of our Grader page.
Cookies don't run code on their own. They're text. The risk is what a site does with them, which is why we let you choose what we collect.
The four categories we use
Use the preferences panel at the top of this page to turn each category on or off.
- Necessary: sign-in tokens, fraud prevention. Always on, the site is broken without them.
- Functional: remember your device-preview toggle, your saved restaurants in the Grader, your theme.
- Analytics: anonymised metrics so we can find dead-ends and broken funnels. From PostHog.
- Marketing: campaign attribution so we know which channels send you here. From Meta + Google Ads. We don't use them for retargeting or share them with anyone.
Specific cookies we set
| Name | Category | Why | Lifetime |
|---|---|---|---|
eft_session | Necessary | Signed-in session token | 30 days |
eft_csrf | Necessary | Prevents cross-site form submission | Session |
eft_device | Functional | Remembers desktop/tablet/mobile preview | 1 year |
eft_theme | Functional | Light or dark dashboard | 1 year |
ph_* | Analytics | PostHog anonymous metrics | 1 year |
_fbp, _gcl_au | Marketing | Campaign attribution | 3 months |
Cookies set by third parties
Some pages embed third-party content like Mapbox tiles or YouTube videos. Those services may set their own cookies that we don't control. Turning off Marketing above blocks the optional ones we choose to load.
How to turn cookies off entirely
Do Not Track
Browsers used to send a "Do Not Track" signal, but the standard never went anywhere. We honour the newer Global Privacy Control (GPC) signal instead, when your browser sends GPC, we treat it as if you'd rejected Marketing and Analytics cookies.
Changes to this notice
If we add a new cookie category, we'll update the panel above and the table, and we won't enable it by default. We'll always ask first.