Cookie Policy
Last updated: May 2026
What are cookies?
Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work efficiently and to provide information to the site owner. Under UK law, cookies that are not strictly necessary require your consent before being set.
Cookies we use
Authentication (Supabase)
When you log in, Supabase sets a session cookie to keep you signed in as you navigate between pages. Without this cookie the site cannot function for logged-in users.
| Cookie | Purpose | Duration |
|---|---|---|
| sb-*-auth-token | Keeps you logged in | Session / 1 week |
Consent required: No — these are strictly necessary.
First-party analytics (999ready)
To understand how visitors use the site — for example which pages are viewed and how long people spend on them — we store a couple of first-party identifiers in your browser's local storage (not third-party cookies). These stay on your device and are only sent to our own servers. We only set them once you have given consent.
| Name | Purpose | Duration |
|---|---|---|
| r999_visitor_id | Anonymous visitor ID (local storage) | Persistent |
| r999_first_touch | Remembers how you first arrived (referrer / source, local storage) | Persistent |
Consent required: Yes — non-essential analytics.
Referral attribution
If you arrive via a referral link (a ?ref= link), we store the referral code in a first-party cookie so that, if you go on to buy, the purchase can be attributed to the person who referred you.
| Cookie | Purpose | Duration |
|---|---|---|
| ref_code | Referral attribution | 45 days |
Consent required: Yes — non-essential.
Google Ads
We use Google Ads to run search campaigns. Google sets a cookie to measure whether someone clicked one of our ads before visiting the site, so we can understand which campaigns are working. Data may be stored in the United States.
| Cookie | Purpose | Duration |
|---|---|---|
| _gcl_au | Ad conversion tracking | 90 days |
Consent required: Yes — non-essential advertising cookie.
Vercel Analytics
Our hosting provider Vercel collects aggregated, anonymous page-view data to help us monitor site performance. Vercel Analytics does not set any cookies and does not collect personal data or IP addresses.
Consent required: No — no cookies set, no personal data collected.
How to manage cookies
You have several options to control non-essential cookies:
- ▸Browser settings — all modern browsers let you block or delete cookies. Visit your browser's help section for instructions (Chrome, Firefox, Safari, Edge).
- ▸Google opt-out — install the Google Analytics Opt-out Browser Add-on to prevent Google Analytics from tracking your visits.
- ▸Ad personalisation — manage your Google ad settings at adssettings.google.com.
Blocking essential cookies (Supabase) will prevent login from working. Blocking analytics and advertising cookies will not affect your ability to use the tests.
More information
For more about how we handle your personal data, see our Privacy Policy. For questions, please get in touch.