Cookie Policy
Effective 17 April 2026
1.What are cookies?
Cookies are small text files that are placed on your device (computer, tablet or mobile phone) when you visit a website. They are widely used to make websites work more efficiently and to provide information to the owners of the site. Cookies allow a website to recognise your device and remember certain information about your visit, such as your preferences or whether you are logged in.
Cookies may be set by the website you are visiting (“first-party cookies”) or by a third-party service operating on that website (“third-party cookies”). Cookies may persist on your device for varying durations: a “session cookie” is deleted when you close your browser, while a “persistent cookie” remains until it expires or you delete it manually.
2.How we use cookies
We use cookies for the following purposes:
- Essential cookies— to enable core functionality such as user authentication and security. The Site cannot function properly without these cookies.
- Analytics cookies— to help us understand how visitors interact with the Site so that we can improve the user experience.
- Advertising cookies— to measure the effectiveness of our advertising on Google and Meta (Facebook/Instagram), build retargeting audiences and attribute purchases to the campaigns that referred them. These are only set if you grant consent via the cookie banner.
- Strictly necessary third-party cookies — to support secure payment processing and fraud prevention during checkout.
3.Cookies we use
The table below sets out the specific cookies placed on your device when you use the Site.
| Cookie name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| sb-rdbtziubjpwfmkdlqhby-auth-token | Supabase | Stores the authenticated user session token. Required for login, account access and secure page navigation. | Essential | Session / persistent (refreshed on activity) |
| cookie_consent | Heliroutes | Records your cookie consent preference so that we do not display the consent banner repeatedly. Stored in your browser’s local storage rather than as a cookie, but treated the same way under PECR. | Essential (local storage) | Until cleared by you |
| _ga | Google Analytics | Registers a unique identifier used to generate statistical data on how visitors use the Site. | Analytics | 2 years |
| _ga_EXB9HFZHWF | Google Analytics (GA4) | Used by Google Analytics 4 (measurement ID G-EXB9HFZHWF) to persist session state and distinguish between individual users. | Analytics | 2 years |
| _fbp | Meta Pixel | Used by Meta (Facebook/Instagram) to deliver advertising and measure ad performance. Only set if you grant advertising consent. | Advertising | 3 months |
| _gcl_au | Google Ads | Used by Google Ads to attribute conversions to ad campaigns across the Google Display Network. Only set if you grant advertising consent. | Advertising | 90 days |
| _gcl_aw / _gcl_dc | Google Ads | Set when a visitor arrives from a Google Ads click. Records the click identifier so purchases can be attributed to the correct campaign. Only set if you grant advertising consent. | Advertising | 90 days |
| IDE / DSID | Google Ads / DoubleClick | Set by Google Ads remarketing tags to build audiences for retargeting on the Google Display Network and YouTube. Only set if you grant advertising consent. | Advertising | Up to 13 months |
| __stripe_mid | Stripe | Set during the payment checkout flow to detect and prevent fraud. | Strictly necessary | 1 year |
| __stripe_sid | Stripe | Set during the payment checkout flow to maintain session integrity and support fraud detection. | Strictly necessary | 30 minutes |
4.Essential cookies
Essential cookies are strictly necessary for the operation of the Site. They enable core functionality including authentication, session management and the recording of your cookie consent preference. Under PECR, these cookies are exempt from the requirement to obtain prior consent because the Site cannot function without them.
You cannot opt out of essential cookies. If you block them through your browser settings, certain parts of the Site — including login and account access — will not work.
5.Analytics cookies
We use Google Analytics 4 (GA4) to collect pseudonymised data about how visitors use the Site. GA4 does not collect full IP addresses — IP anonymisation is enabled by default. The data is used for aggregated statistical reporting to help us understand which pages are most visited, how users navigate between pages and where we can improve the experience. Google Analytics sets the cookies identified in the table above for this purpose.
Analytics cookies are only placed on your device if you give your consent through our cookie consent banner when you first visit the Site. You may decline analytics cookies at any time and continue to use the Site without any loss of functionality.
Google processes the data collected by these cookies in accordance with its own privacy policy. For further information, please see Google’s Privacy Policy. You may also opt out of Google Analytics across all websites by installing the Google Analytics Opt-out Browser Add-on.
6.Advertising cookies
We use Google Ads and the Meta Pixel (Facebook/Instagram) to measure the effectiveness of our advertising, build retargeting audiences and attribute purchases to the campaigns that referred visitors to the Site. Cookies such as _gcl_au, _gcl_aw,_fbp, IDE and DSID are set for these purposes, as listed in the table above.
Advertising cookies are blocked until you grant advertising consent via our cookie consent banner. You can withdraw consent at any time by clicking the “Cookie Settings” tab at the bottom of any public page and selecting “Decline”. Declining advertising cookies has no effect on your ability to use the Site.
Where you grant consent, the data collected by these cookies may be processed by Google and Meta in accordance with their own privacy policies, available at policies.google.com/privacy and facebook.com/privacy/policy.
7.Third-party cookies
Certain cookies on the Site are set by third-party services that we rely upon to provide specific functionality. We set out below the third parties whose cookies may appear on your device when you use the Site:
- Supabase— provides our authentication infrastructure. The Supabase session cookie is essential for secure login and account management.
- Google Analytics— provides website usage analytics. These cookies are only set if you give your consent via the cookie banner.
- Google Ads— provides advertising measurement, conversion attribution and retargeting across the Google Display Network and YouTube. Only set if you grant advertising consent via the cookie banner.
- Meta Pixel (Facebook/Instagram) — provides advertising measurement and retargeting on Facebook and Instagram. Only set if you grant advertising consent via the cookie banner.
- Stripe— provides secure payment processing. Stripe cookies are primarily set during the checkout process and are used for fraud prevention and session integrity.
We do not control the cookies set by these third parties. Each provider operates under its own cookie and privacy policy. We encourage you to review the relevant policies of Supabase, Google, Meta and Stripe.
8.Managing and deleting cookies
You have several options for managing cookies on the Site.
Cookie consent banner
When you first visit the Site, a cookie consent banner will appear allowing you to accept or decline non-essential cookies. Your preference is saved so that the banner does not reappear on subsequent visits. You may change your preference at any time using the Cookie Settings link available on the Site, or by clearing your cookies and revisiting the Site.
Browser settings
Most web browsers allow you to control cookies through their settings. You can typically set your browser to block cookies, delete existing cookies or alert you when a cookie is being set. The specific steps vary by browser. The links below provide guidance for the most commonly used browsers:
For other browsers, please consult the browser’s help documentation or visit www.aboutcookies.org for general guidance on managing cookies.
9.Impact of disabling cookies
If you choose to disable or block certain cookies, please be aware of the following consequences:
- Essential cookies: blocking these will prevent you from logging in, accessing your account and using core features of the Site. We strongly advise against disabling essential cookies.
- Analytics cookies: declining these has no effect on your ability to use the Site. We will simply receive less information about how the Site is used, which may limit our ability to identify and resolve issues.
- Advertising cookies: declining these has no effect on your ability to use the Site. Any advertising you see from us on other websites, Facebook, Instagram or YouTube will be less relevant to your interests, but you will still see advertising.
- Stripe cookies (strictly necessary): blocking these may prevent you from completing purchases through the Site as they are required for secure payment processing and fraud prevention. If you experience difficulties during checkout, please ensure that cookies from stripe.com are not blocked.
10.Changes to this policy
We may update this Cookie Policy from time to time to reflect changes in the cookies we use, changes in applicable law or for other operational or legal reasons. When we make material changes, we will update the “Effective date” at the top of this page. We encourage you to review this policy periodically so that you remain informed about how we use cookies. Where any changes affect non-essential cookies, we will seek your consent again through the cookie consent banner.
11.Further information
For more information about how we collect, use and protect your personal data, please see our Privacy Policy.
If you have any questions about this Cookie Policy or our use of cookies, please contact us at:
Heliroutes Ltd
Company number: 17153847
Registered office: Suite RA01, 195-197 Wood Street, London, E17 3NU
Email: hello@heliroutes.co.uk
Website: heliroutes.co.uk