Cookie policy
Last updated: 6 September 2026
A cookie is a small file a website stores in your browser. Some are needed for a site to work at all; others are optional. This page lists what Craftrun actually uses, which is less than most sites, and how to change your mind.
We follow the Privacy and Electronic Communications Regulations (PECR) and the UK GDPR. In practice that means one rule you can hold us to: nothing except strictly necessary cookies is loaded unless and until you have said yes. Nothing is pre-ticked, and refusing is the same size button as accepting, on the same row of the same banner.
Strictly necessary
These are required for the service to function and to be secure. They do not track you and are not used for advertising. Under PECR they are exempt from consent, because without them you could not use a service you have asked for. If you block them, signing in will not work.
| Cookie | What it does | How long |
|---|---|---|
| Authentication session | Keeps you signed in as you move between pages. Set by Supabase, who host our database. Without it you would have to log in on every screen. | Session, refreshed while you stay active; cleared when you sign out |
| Stripe payment cookies | Set only on a page where a payment is being made, by Stripe, to process that payment and to spot fraud. Strictly necessary for a payment you have asked to make. | Set and governed by Stripe |
| Cookie choice | Records what you chose here so we stop asking. Kept in your browser's local storage rather than as a cookie, and never sent to us. | Until you change it or clear your browser data |
What you are asked about
Two switches, both off until you turn them on. This is what each one currently controls.
Content from other sites
In useLets a page load something hosted elsewhere, such as the still image for a video on a booking page. Those sites can see that you visited.
Analytics
Nothing behind it todayCounting which pages get used, so we know what to work on. We do not load any analytics at all at the moment, so this switch currently has nothing behind it.
On analytics, plainly
We do not run any analytics. No Google Analytics, no product analytics, no heatmaps, nothing that counts you. The switch exists so that the day we add something, it is already behind a gate you control rather than being added first and asked about later. Until then, turning it on gives us nothing and turning it off costs you nothing.
What we do not use
- No advertising or retargeting cookies.
- No social media tracking pixels.
- No third-party fonts. The typeface is served from our own domain.
- No selling or sharing of any of this with data brokers.
Content from other sites
A business can put a short video on its booking page. We never embed the player on page load: you get a still image and a play button, and the player only loads once you press it, because an embedded player starts profiling a visitor whether or not they watch anything.
Even the still image is hosted by the video site, so asking for it would tell them you were on that page. That request is behind the “Content from other sites” switch. Leave it off and you get a plain coloured panel with the same play button, which works exactly the same way.
Pressing play is a clear request for that player, so at that point it loads and the video site sets its own cookies under its own policy.
One other thing reaches outside, and only inside your own account. If you paste a screenshot of an enquiry so Craftrun can read the text out of it, the text-recognition engine downloads itself from a public code CDN (jsDelivr) the first time you use it, because it is several megabytes and would otherwise slow every page for everyone. The reading then happens on your device: the screenshot is never uploaded anywhere, which matters because it is usually a photograph of somebody else's message. The one exception is the optional “Read a screenshot with AI” button, which does upload the picture to our AI provider, and only when you press it.
Giving and withdrawing consent
- To give consent, choose “Accept all” on the banner, or “Choose individually” to turn on only what you want.
- To refuse, choose “Reject non-essential”. Only the strictly necessary items above are used. Opening the detail panel and pressing save without touching a switch does the same thing, because nothing is ticked for you.
- To change your mind later, use here or in the footer of any page. It reopens the banner. You do not need to clear your browser data, and you will not be signed out.
Your choice is kept in your browser rather than on our servers, so it does not follow you to another device. If we ever add a new category, we ask again rather than assuming an old answer covers it. The one exception is a refusal: if you have said no, we take that as still meaning no and do not ask you again.
More information
How we handle personal data more generally, including your rights and how to complain to the ICO, is set out in our privacy policy.