Cookie policy
Last updated: 30 August 2026
A cookie is a small file a website stores in your browser. Some are needed for a site to work at all; others are optional. This page lists every category Craftrun uses and how to change your mind.
We follow the Privacy and Electronic Communications Regulations (PECR) and the UK GDPR. In practice that means one rule you can hold us to: nothing except strictly necessary cookies is set unless and until you have said yes. No pre-ticked boxes, and refusing is exactly as easy as accepting — both are buttons on the same banner.
Strictly necessary
These are required for the service to function and for it to be secure. They do not track you and are not used for advertising. Under PECR they are exempt from consent, because without them you could not use a service you have asked for. If you block them, signing in will not work.
| Cookie | What it does | How long |
|---|---|---|
| Authentication session | Keeps you signed in as you move between pages. Without it you would have to log in on every screen. | Session, refreshed while you stay active; cleared when you sign out |
| CSRF token | A security token that proves a form was submitted from Craftrun and not from a malicious site pretending to be you. | Session |
| Cookie choice | Records the choice you made in the cookie banner so we stop asking. Stored in your browser's local storage rather than as a cookie. | Until you clear your browser data |
Functional
These remember your preferences so the app behaves the way you left it. They are optional and are only set after you accept.
| Cookie | What it does | How long |
|---|---|---|
| Display preferences | Remembers small choices you make in the app — the calendar view you last used, whether a panel was collapsed. | 12 months |
Analytics
These tell us which pages and features are actually used, so we spend our time on the parts that matter. They are optional and are only set after you accept. If you reject them, we simply have less information — nothing about the service changes for you.
| Cookie | What it does | How long |
|---|---|---|
| Usage analytics | Counts page views and which features are used, so we know what to improve. Aggregated; not used to build a profile of you or to target advertising. | Up to 13 months |
What we do not use
- No advertising or retargeting cookies.
- No social media tracking pixels.
- No selling or sharing of cookie data with data brokers.
Third-party cookies
When your customer pays through a Craftrun booking page, Stripe sets its own cookies to process the payment and to detect fraud. These are strictly necessary for that payment to happen. Stripe's own privacy notice covers them.
Giving and withdrawing consent
- To give consent — choose “Accept all” on the cookie banner shown on your first visit.
- To refuse — choose “Reject non-essential”. Only the strictly necessary items above are used.
- To withdraw consent later — clear the site data for Craftrun in your browser settings. The banner will appear again on your next visit and you can make a different choice. Withdrawing is always available and costs nothing.
You can also block or delete cookies entirely in your browser's privacy settings. Doing so will stop you from staying signed in to Craftrun.
More information
How we handle personal data more generally — including your rights and how to complain to the ICO — is set out in our privacy policy.