1. The rules we follow
PECR Regulation 6 requires information and, unless an exception applies, consent before we store or access information on your device. Strictly necessary storage for a service you request (sign-in, security, completing a booking) does not need consent. The Data (Use and Access) Act 2025 inserted further PECR exceptions, including certain first-party statistical and appearance storage, which commenced on 5 February 2026. Live support chat (operated by COZQ Limited), Google Analytics, Microsoft Clarity and Meta Pixel for Cobbtree advertising measurement load on Cobbtree public pages as essential. Optional first-party storage that remembers venues you viewed is on unless you switch it off under Manage. We do not currently load TikTok Pixel or similar extra advertising tags.
2. Your choices
3. What we actually use
| Name | Type | Category | Purpose | Duration |
|---|---|---|---|---|
| _ga, _ga_* and _gid | Cookie | Analytics | Google Analytics 4 measures visits, campaign performance and business registration conversions. This loads on Cobbtree public pages unless you choose Essential only or switch analytics off. We do not send names, email addresses or other personal data to Google Analytics. | Set by Google. _ga is usually up to 2 years. _gid is usually 24 hours. |
| _clck, _clsk and related Microsoft Clarity storage | Cookie | Analytics | Microsoft Clarity measures how people use Cobbtree public pages so we can improve the product. This loads unless you choose Essential only or switch analytics off. We do not send names or email addresses to Clarity. | Set by Microsoft. Often up to 1 year. |
| cobbtree_access, cobbtree_refresh, cobbtree_session and cobbtree_csrf | Cookie | Strictly necessary | Keep you signed in. The session cookies are HttpOnly, so page scripts cannot read them. cobbtree_session only records that you are signed in. cobbtree_csrf protects signed-in actions from another site. | The access cookie lasts about 20 minutes and renews while you are using Cobbtree. The sign-in lasts about 30 days of use, and no longer than 90 days. |
| Booking session | Cookie | Strictly necessary | Remember an in-progress booking so you can complete checkout. | 7 days. |
| Business-area session | Cookie | Strictly necessary | Remember that you have an active business-area session. | 30 days. |
| Cookie preferences | Cookie | Strictly necessary | Remember your cookie and storage choices, including optional venue memory, across cobbtree.com and partners.cobbtree.com. | 1 year, or until you clear site data. |
| Device security identifier | localStorage | Strictly necessary | Identify this browser installation for device registration and security. | Until you clear site data. |
| Search location for this visit | sessionStorage | Strictly necessary | Keep the town or map point you chose during this visit so search and booking stay consistent. | Browser session. |
| Temporary signup and checkout details | sessionStorage | Strictly necessary | Remember a selected plan, migration choice or in-progress booking during this visit. | Browser session. |
| Cloudflare security storage | Cookie | Strictly necessary | Protect the site from automated abuse. | Set by Cloudflare. Often session or a short period. |
| Stripe cookies and local storage | Cookie | Strictly necessary | Process a card payment or save a card when you use Stripe Elements on a checkout or billing page. | Set by Stripe when a payment form loads. |
| Recently viewed venues | localStorage | Functional | Remember venues you recently opened so we can show them again. | Until you clear it or turn optional storage off. |
| Marketplace discovery preferences | localStorage | Functional | A random seed used to vary marketplace discovery rails. | Until you clear it or turn optional storage off. |
| Approximate search area | localStorage | Functional | Remember an approximate map origin on this device. | Until you clear it or turn optional storage off. |
| cozq_live_chat and cozq_grabber | localStorage | Support chat | Operate the Cobbtree live chat widget, including remembering a chat session and how often a prompt has been shown. This is essential on Cobbtree websites. | Until you clear site data for this browser. Some sessions last only until you close the tab. |
| _fbp, _fbc and related Meta Pixel storage | Cookie | Advertising | Measure Cobbtree advertising on Meta (Facebook and Instagram) and attribute visits from those ads. This loads on Cobbtree public pages unless you choose Essential only or switch analytics off. We do not send names, email addresses or message text. | Set by Meta. _fbp is often up to 90 days. |
4. Cloudflare and Stripe
Cloudflare may set security cookies independently as part of protecting the site, including when Invisible Turnstile runs during sign-in. That processing is described in the Cloudflare Turnstile Privacy Policy. Stripe may set cookies when a payment form loads. Those are treated as strictly necessary for security or to take a payment you requested.
5. Business Sites
A website we host for a business may use the same strictly necessary booking-session cookie so a visitor can complete a booking. The business is responsible for any additional information it must give its visitors as controller. Cobbtree Sites do not currently let a business attach their own advertising pixels through our editor.