The few cookies we use, and the ones we ask about first.

These make the site work and cannot be switched off. They hold nothing about you beyond what they need.

• Sign-in session (Supabase auth token in local storage): keeps you logged in to your account. Cleared when you log out; otherwise renews while you use the site.
• Cookie choice (so_consent, local storage): remembers whether you accepted or declined analytics so we do not ask again. Stays until you clear your browser data.
• This visit only (session storage): whether the homepage animation has played (bk-hero-played) and whether you hid the sign-up bar (bk-sticky-cta-hidden). Gone when you close the tab.
• Postcode note (bk-postcode-request, local storage): only if you choose “keep my postcode on this device” on the coverage page. Never sent anywhere; stays until you clear your browser data.
• Visit and arrival record (so_sid and so_ft, local storage): a random visit id and the page and link you arrived on (including any campaign tags in the address). Stored on your device straight away so a later “accept” still counts the visit correctly; nothing is sent to us until you accept analytics.

We use Google Analytics 4 and Google Ads conversion measurement, loaded through Google Tag Manager, with Google Consent Mode. The tags load with analytics and advertising storage set to denied, so until you tap Accept they set no cookies and send no identifiers. After you accept they set cookies (_ga, _ga_*, _gcl_*) that give your browser a random id so we can count visits, see which pages help people decide, spot pages that break, and tell our own ads which visits led to a sign-up. These last up to two years.

Accepting also lets our first-party visit record (above) be sent to SynthOS, the platform that runs this site, so we can see which campaigns bring people who go on to subscribe. We do not build advertising audiences from your data or share it with other advertisers.

Sentry records errors that happen in your browser (the page, the browser version and a short-lived session id) so we can fix them. It runs on our legitimate interest in keeping the site working, sets no advertising cookies and does not follow you across sites.

The feedback button in the corner of each page is provided by SynthOS. It keeps a session id so your message and the page you were on arrive together. It sets no advertising cookies.

To change your cookie choice, clear the so_consent entry (or all site data for this site) in your browser; the question appears again on your next visit and your new answer applies from then. Your browser also lets you block or delete cookies for any site, but blocking the essential ones means you cannot stay signed in.

The apps for iPhone and Android do not use cookies; they use the same sign-in token and, only if you opt in, push notifications and analytics, which you can switch off in the app’s settings.

If we add a tool that sets a new cookie we update this page before it goes live, and ask for consent again if the purpose has changed. The date at the top is when this page last changed.