Cookie Policy
This Cookie Policy explains how Flapjack Running ("we", "us", "our") uses cookies and similar technologies on our website and services. It should be read together with our Privacy Policy.
1. What are cookies?
Cookies are small text files placed on your device to store data that can be read by a web server in the domain that placed the cookie. We also use similar technologies such as local storage.
2. Who is the controller?
Flapjack Running is the data controller. Contact: 1flapjackrunning@gmail.com.
3. How we use cookies
- Essential cookies (strictly necessary): Required for core site functionality, security, login sessions, and CSRF protection.
- Analytics cookies (only with your consent): To understand usage and improve performance. These are disabled by default and will only load after you opt in.
- Social login/OAuth: When you sign in with Google, Google may set cookies on its own domains to complete the OAuth flow. We do not control those cookies; see Google’s policies.
4. Cookies we set
| Cookie | Provider | Purpose | Category | Expiry |
|---|---|---|---|---|
| sessionid | Flapjack Running | Maintains your logged‑in session and preferences. | Essential | Up to 2 weeks (Django default) |
| csrftoken | Flapjack Running | Protects forms from cross‑site request forgery (CSRF) attacks. | Essential | Up to 1 year (Django default) |
5. Analytics cookies (only if you consent)
We plan to use Google Analytics to improve site performance and features. These cookies will not be placed unless you opt in via our cookie banner. Typical cookies include:
| Cookie | Provider | Purpose | Category | Expiry |
|---|---|---|---|---|
| _ga | Distinguishes users for analytics. | Analytics (Consent) | 2 years | |
| _gid | Distinguishes users for analytics. | Analytics (Consent) | 24 hours | |
| _gat / _ga_* | Throttles request rate / session metrics. | Analytics (Consent) | 1 minute – 2 years |
Analytics cookies will only load after you choose “Accept All” or enable analytics in “Customize.” You can withdraw consent at any time.
6. Social login (Google OAuth)
If you choose to log in with Google, Google may set cookies on its own domains (e.g., accounts.google.com) to authenticate you and secure the login process. Please review Google’s policies for details.
7. Similar technologies
We use browser local storage to remember your cookie preferences:
- metarun_cookie_consent — whether you’ve made a cookie choice.
- metarun_analytics_consent — your analytics consent preference.
These keys are stored in your browser and are not cookies, but they serve a similar purpose for preference management.
8. Managing your preferences
- Use the cookie banner’s “Customize” button to enable/disable analytics cookies.
- If you have already made a choice and want to change it, you can clear your cookies and site data (including local storage) in your browser for our domain, or use the “Customize” control when the banner appears again.
- You can also disable cookies via your browser settings. Essential cookies are required for the site to function and cannot be turned off.
9. Legal bases (EU/UK)
- Essential cookies: Legitimate interests (security and service delivery) and/or performance of a contract.
- Analytics cookies: Consent (you can withdraw at any time).
10. International transfers
We may process data in the United States. Where required, we implement appropriate safeguards consistent with GDPR/UK GDPR. See our Privacy Policy for details.
11. Changes to this Cookie Policy
We may update this Cookie Policy from time to time. We will post changes on this page and update the “Last Updated” date above.
12. Contact us
If you have any questions about this Cookie Policy or our use of cookies, contact us at 1flapjackrunning@gmail.com.