Last updated: August 23, 2026
This Cookie Policy explains which cookies we use on this Site and why. It supplements our
Privacy Policy, which explains how we handle personal information generally.
Cookies are small files a website stores in your browser. We use them for three things: to run the Site
at all, to understand how it is used, and — only if you agree — to measure our advertising.
What we set
Strictly necessary
These are set without asking, because the Site cannot work without them. This includes the two cookies
that record your cookie choice: they exist in order to honour that choice, so asking permission to store
your "no" would be circular. Rejecting everything still leaves these in place.
`consent::analytics` — first-party (ours), 12 months. Stores your analytics and advertising choice, so we can honour it and stop asking.
`consent::region` — first-party (ours), session. Records whether your connection was placed in the EEA or UK, which is what decides whether the consent banner is shown.
`__Secure-authjs.session-token` — first-party (ours), 30 days. Keeps you signed in.
`__Host-authjs.csrf-token` — first-party (ours), session. Protects sign-in and account forms against cross-site request forgery.
`__Secure-authjs.callback-url` — first-party (ours), session. Returns you to the page you were on after signing in.
`__Secure-authjs.pkce.code_verifier`, `__Secure-authjs.state`, `__Secure-authjs.nonce`, `__Secure-authjs.challenge` — first-party (ours), 15 minutes. Set only while you are completing a Google sign-in, to tie the response back to the request you started.
`__Secure-xmp.fast-upload-auth` — first-party (ours), 3 minutes. Short-lived token authorising a file upload in progress.
`NEXT_LOCALE` — first-party (ours), 1 year. Remembers your language.
`BOX_TIMEZONE` — first-party (ours), 1 year. Remembers your time zone, so times and bookings display correctly.
`preview_password` — first-party (ours), 1 year. Set only on password-gated preview sites, to remember that you unlocked one.
Analytics — only if you accept
Not set unless you switch Analytics on. If you reject, or close the banner without choosing, these are
never written.
`_ga` — third-party (Google), 2 years. Distinguishes one visitor from another.
`_ga_<id>` — third-party (Google), 2 years. Holds session state for the analytics property.
Advertising — only if you accept
We do not currently set any advertising cookies. No advertising pixel is active on this Site as of
the date above. If that changes, this page will list the cookies before they are set, and the
Advertising category will remain off until you switch it on. See
Advertising in our Privacy Policy for the providers this would involve.
What analytics is used for
We use Google Analytics 4, provided by Google Ireland Limited and Google LLC, across all of our sites,
with a single measurement property. It records page views, scrolls, outbound link clicks, file downloads,
and engagement with embedded YouTube videos. Site-search and form-interaction tracking are switched off.
We also record three events noting whether the consent banner was shown, accepted or declined — that is
how we know the banner is working.
Google Signals is off and ad-data redaction is on, so this data is not used to build advertising
audiences. Google keeps analytics data for 14 months. Google may process it in the United States, under
the European Commission's Standard Contractual Clauses. This is separate from how long we keep your
account data, which is covered in the Privacy Policy.
Changing your mind
Your choice is not permanent. Open Cookie settings at any time to switch Analytics or Advertising on
or off. Withdrawing is exactly as easy as giving consent — the same control, the same number of clicks —
and there is no penalty for saying no.
You can also block or delete cookies through your browser's own settings. That works, but it is a blunt
instrument: it will also remove the cookies that keep you signed in and remember your language, and some
parts of the Site will stop working properly. It is not a substitute for the choice above.