Cookie Policy
Effective 17 April 2026
1.What are cookies?
Cookies are small text files that are placed on your device (computer, tablet or mobile phone) when you visit a website. They are widely used to make websites work more efficiently and to provide information to the owners of the site. Cookies allow a website to recognise your device and remember certain information about your visit, such as your preferences or whether you are logged in.
Cookies may be set by the website you are visiting (“first-party cookies”) or by a third-party service operating on that website (“third-party cookies”). Cookies may persist on your device for varying durations: a “session cookie” is deleted when you close your browser, while a “persistent cookie” remains until it expires or you delete it manually.
2.How we use cookies
We use cookies for the following purposes:
- Essential cookies— to enable core functionality such as user authentication and security. The Site cannot function properly without these cookies.
- Analytics cookies— to help us understand how visitors interact with the Site so that we can improve the user experience.
- Advertising cookies— to measure the effectiveness of our advertising on Google and Meta (Facebook/Instagram), build retargeting audiences and attribute purchases to the campaigns that referred them. These are only set if you grant consent via the cookie banner.
- Strictly necessary third-party cookies — to support secure payment processing and fraud prevention during checkout.
3.Manage your preferences
You can change your cookie choices at any time. The button below opens the same preferences panel that appears when you first visit the site.
4.Cookies we use
The table below sets out the specific cookies placed on your device when you use the Site. This list is auto-generated from the same registry that powers our consent banner, so the two cannot drift out of sync.
| Cookie name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| sb-rdbtziubjpwfmkdlqhby-auth-token | Supabase | Stores your authenticated session token so you stay logged in. | Strictly necessary | Session / persistent (refreshed on activity) |
| heliroutes_consent | Heliroutes | Stores your cookie consent preferences. Held in local storage rather than as a cookie, but treated the same way under PECR. | Strictly necessary | Until cleared by you |
| __stripe_mid | Stripe | Fraud detection and merchant identification during checkout. | Strictly necessary | 1 year |
| __stripe_sid | Stripe | Session integrity during the payment flow. | Strictly necessary | 30 minutes |
| _ga | Google Analytics | Distinguishes individual visitors to generate statistical data on site usage. | Analytics | 2 years |
| _ga_EXB9HFZHWF | Google Analytics (GA4) | Persists session state for measurement ID G-EXB9HFZHWF. | Analytics | 2 years |
| _clck / _clsk | Microsoft Clarity | Identifies a unique browser session for behavioural analytics and heatmaps. | Analytics | 1 year |
| _gcl_au | Google Ads | Attributes conversions to ad campaigns across the Google Display Network. | Advertising | 90 days |
| _gcl_aw / _gcl_dc | Google Ads | Records the click identifier so purchases can be attributed to the correct ad campaign. | Advertising | 90 days |
| IDE / DSID | Google Ads / DoubleClick | Builds audiences for retargeting on the Google Display Network and YouTube. | Advertising | Up to 13 months |
| _fbp | Meta Pixel | Used by Meta (Facebook/Instagram) to deliver advertising and measure ad performance. | Advertising | 3 months |
5.Essential cookies
Essential cookies are strictly necessary for the operation of the Site. They enable core functionality including authentication, session management and the recording of your cookie consent preference. Under PECR, these cookies are exempt from the requirement to obtain prior consent because the Site cannot function without them.
You cannot opt out of essential cookies. If you block them through your browser settings, certain parts of the Site — including login and account access — will not work.
6.Analytics cookies
We use Google Analytics 4 (GA4) to collect pseudonymised data about how visitors use the Site. GA4 does not collect full IP addresses — IP anonymisation is enabled by default. The data is used for aggregated statistical reporting to help us understand which pages are most visited, how users navigate between pages and where we can improve the experience. Google Analytics sets the cookies identified in the table above for this purpose.
Analytics cookies are only placed on your device if you give your consent through our cookie consent banner when you first visit the Site. You may decline analytics cookies at any time and continue to use the Site without any loss of functionality.
Google processes the data collected by these cookies in accordance with its own privacy policy. For further information, please see Google’s Privacy Policy. You may also opt out of Google Analytics across all websites by installing the Google Analytics Opt-out Browser Add-on.
7.Advertising cookies
We use Google Ads and the Meta Pixel (Facebook/Instagram) to measure the effectiveness of our advertising, build retargeting audiences and attribute purchases to the campaigns that referred visitors to the Site. Cookies such as _gcl_au, _gcl_aw,_fbp, IDE and DSID are set for these purposes, as listed in the table above.
Advertising cookies are blocked until you grant advertising consent via our cookie consent banner. You can withdraw consent at any time by clicking the “Cookie Settings” tab at the bottom of any public page and selecting “Decline”. Declining advertising cookies has no effect on your ability to use the Site.
Where you grant consent, the data collected by these cookies may be processed by Google and Meta in accordance with their own privacy policies, available at policies.google.com/privacy and facebook.com/privacy/policy.
8.Third-party cookies
Certain cookies on the Site are set by third-party services that we rely upon to provide specific functionality. We set out below the third parties whose cookies may appear on your device when you use the Site:
- Supabase — Authentication and session management. Required so you can stay logged in across pages. Privacy policy
- Heliroutes consent — Records your cookie choice so the banner does not show again on every page load. Privacy policy
- Stripe — Secure payment processing and fraud detection during checkout. Cookies are only set when you reach the checkout flow. Privacy policy
- Google Analytics 4 — Pseudonymised page-view and engagement data. IP anonymisation enabled by default. Privacy policy
- Microsoft Clarity — Anonymous heatmaps and session replays. Personal information in form inputs is automatically masked. Privacy policy
- Google Ads — Measures the effectiveness of our Google Ads campaigns and supports retargeting across the Google Display Network and YouTube. Privacy policy
- Meta Pixel — Measures the effectiveness of our Facebook and Instagram advertising and supports retargeting on those platforms. Privacy policy
We do not control the cookies set by these third parties. Each provider operates under its own cookie and privacy policy. We encourage you to review the relevant policies of Supabase, Google, Meta and Stripe.
9.Managing and deleting cookies
You have several options for managing cookies on the Site.
Cookie consent banner
When you first visit the Site, a cookie consent banner will appear allowing you to accept or decline non-essential cookies. Your preference is saved so that the banner does not reappear on subsequent visits. You may change your preference at any time using the Cookie Settings link available on the Site, or by clearing your cookies and revisiting the Site.
Browser settings
Most web browsers allow you to control cookies through their settings. You can typically set your browser to block cookies, delete existing cookies or alert you when a cookie is being set. The specific steps vary by browser. The links below provide guidance for the most commonly used browsers:
For other browsers, please consult the browser’s help documentation or visit www.aboutcookies.org for general guidance on managing cookies.
10.Impact of disabling cookies
If you choose to disable or block certain cookies, please be aware of the following consequences:
- Essential cookies: blocking these will prevent you from logging in, accessing your account and using core features of the Site. We strongly advise against disabling essential cookies.
- Analytics cookies: declining these has no effect on your ability to use the Site. We will simply receive less information about how the Site is used, which may limit our ability to identify and resolve issues.
- Advertising cookies: declining these has no effect on your ability to use the Site. Any advertising you see from us on other websites, Facebook, Instagram or YouTube will be less relevant to your interests, but you will still see advertising.
- Stripe cookies (strictly necessary): blocking these may prevent you from completing purchases through the Site as they are required for secure payment processing and fraud prevention. If you experience difficulties during checkout, please ensure that cookies from stripe.com are not blocked.
11.Changes to this policy
We may update this Cookie Policy from time to time to reflect changes in the cookies we use, changes in applicable law or for other operational or legal reasons. When we make material changes, we will update the “Effective date” at the top of this page. We encourage you to review this policy periodically so that you remain informed about how we use cookies. Where any changes affect non-essential cookies, we will seek your consent again through the cookie consent banner.
12.Further information
For more information about how we collect, use and protect your personal data, please see our Privacy Policy.
If you have any questions about this Cookie Policy or our use of cookies, please contact us at:
Heliroutes Ltd
Company number: 17153847
Registered office: Suite RA01, 195-197 Wood Street, London, E17 3NU
Email: hello@heliroutes.co.uk
Website: heliroutes.co.uk