1. The rules we follow
PECR Regulation 6 requires information and, unless an exception applies, consent before we store or access information on your device. Strictly necessary storage for a service you request (sign-in, security, completing a booking) does not need consent. The Data (Use and Access) Act 2025 inserted further PECR exceptions, including certain first-party statistical and appearance storage, which commenced on 5 February 2026. Advertising and cross-site tracking still need consent. Cobbtree does not currently load Google Analytics, Meta Pixel, TikTok Pixel or similar advertising tags.
2. Your choices
3. What we actually use
| Name | Type | Category | Purpose | Duration |
|---|---|---|---|---|
| Sign-in session | localStorage | Strictly necessary | Keep you signed in to Cobbtree web apps. | Until you sign out or the refresh token expires (up to 90 days). |
| Booking session | Cookie | Strictly necessary | Remember an in-progress booking so you can complete checkout. | 7 days. |
| Business-area session | Cookie | Strictly necessary | Remember that you have an active business-area session. | 30 days. |
| Cookie preferences | localStorage | Strictly necessary | Remember your cookie and storage choices. | Until you clear site data. |
| Device security identifier | localStorage | Strictly necessary | Identify this browser installation for device registration and security. | Until you clear site data. |
| Search location for this visit | sessionStorage | Strictly necessary | Keep the town or map point you chose during this visit so search and booking stay consistent. | Browser session. |
| Temporary signup and checkout details | sessionStorage | Strictly necessary | Remember a selected plan, migration choice or in-progress booking during this visit. | Browser session. |
| Cloudflare security storage | Cookie | Strictly necessary | Protect the site from automated abuse. | Set by Cloudflare. Often session or a short period. |
| Stripe cookies and local storage | Cookie | Strictly necessary | Process a card payment or save a card when you use Stripe Elements on a checkout or billing page. | Set by Stripe when a payment form loads. |
| Recently viewed venues | localStorage | Functional | Remember venues you recently opened so we can show them again. | Until you clear it or turn optional storage off. |
| Marketplace discovery preferences | localStorage | Functional | A random seed used to vary marketplace discovery rails. | Until you clear it or turn optional storage off. |
| Approximate search area | localStorage | Functional | Remember an approximate map origin on this device. | Until you clear it or turn optional storage off. |
| tawk.to cookies and local storage | Cookie | Support chat | Operate the optional live chat widget, including remembering a chat session. | Set by tawk.to. Often months. |
4. Cloudflare and Stripe
Cloudflare may set security cookies independently as part of protecting the site. Stripe may set cookies when a payment form loads. Those are treated as strictly necessary for security or to take a payment you requested.
5. Business Sites
A website we host for a business may use the same strictly necessary booking-session cookie so a visitor can complete a booking. The business is responsible for any additional information it must give its visitors as controller. Cobbtree Sites do not currently let a business attach their own advertising pixels through our editor.