Cookie Policy

Last Updated: 5 January 2026

1. What Are Cookies?

Cookies are small text files stored on your device (computer, smartphone, or tablet) when you visit our website. They allow us to recognise you, remember your preferences, and improve your experience. Cookies are not programs and cannot harm your device.

2. Types of Cookies We Use

2.1 Essential Cookies (Always On)

These cookies are necessary for the website to function. They enable core features like authentication, security, and payment processing. You cannot opt-out of these cookies without losing functionality.

session_id

Maintains your login session across pages. Expires when you close your browser.

csrf_token

Prevents cross-site request forgery attacks on state-changing operations (form submissions, case creation).

auth_token

Authenticates your identity to our API. Used for secure data access and authorization.

payment_session

Temporarily stores payment information during checkout (PCI-compliant, Stripe handled).

security_flags

Tracks security settings and multi-factor authentication status.

2.2 Analytics Cookies (You Can Opt-Out)

These cookies help us understand how you use our website by collecting anonymous usage data. This information helps us improve the platform, fix bugs, and understand which features are most valuable.

Google Analytics 4 Cookies

Cookie Names: _ga, _ga_[MEASUREMENT_ID], _gid, _gat

Purpose: Measures page views, session duration, user flow, and conversion events (case creation, subscription signup).

Duration: _ga persists for 2 years; _gid expires after 24 hours

Data Shared: Anonymized usage data (no personal information)

Privacy Policy: Google Privacy Policy

Google Tag Manager Cookies

Cookie Names: _gtm, _ga (via GTM)

Purpose: Manages analytics pixel deployment. Does not store data itself; manages other tags.

Duration: Session-based

2.3 Preference Cookies

These cookies remember your preferences for a better experience (e.g., dark mode, language selection, dismissed notifications).

theme_preference

Remembers if you prefer dark or light mode.

language_preference

Stores your language selection (English, Welsh, etc.).

accessibility_settings

Saves accessibility preferences (high contrast, font size, etc.).

dismissed_notices

Tracks which notifications or banners you've dismissed.

2.4 Marketing Cookies (Optional)

We currently do not use marketing or advertising cookies. However, if we partner with advertising platforms in the future, we will clearly disclose this and obtain your consent first.

3. How to Control Cookies

3.1 Browser Settings

Most web browsers allow you to control cookies through settings. You can:

  • View cookies stored on your device
  • Delete all or specific cookies
  • Block new cookies entirely
  • Receive warnings before cookies are set

Note: Disabling essential cookies may prevent login and payment functionality.

3.2 Google Analytics Opt-Out

To disable Google Analytics tracking, install the official opt-out browser extension:

Google Analytics Opt-Out Browser Add-on

https://tools.google.com/dlpage/gaoptout

3.3 Privacy Settings in Your Account

You can manage tracking preferences in your account settings:

  • Disable analytics data collection
  • Opt-out of marketing emails
  • Control data sharing settings
  • Request deletion of your usage data

4. Third-Party Cookies & External Services

4.1 Google Analytics (Third-Party)

Google Analytics is a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses cookies and similar tracking technologies to analyse how visitors use our website.

  • Data Collected: Page views, session duration, browser type, location, device type
  • Data Processing: Processed by Google for analytics reporting
  • Data Retention: Typically 26 months by default
  • GDPR Compliance: Google has signed Standard Contractual Clauses
  • Privacy Policy: Google Privacy Policy

4.2 Google Tag Manager (Third-Party)

Google Tag Manager (GTM) is a tag management system that allows us to deploy various tracking pixels and analytics services without modifying code directly.

  • What GTM Does: Manages and deploys Google Analytics, conversion tracking, and other analytics pixels
  • Cookies Set: GTM itself sets minimal cookies; most cookies come from tools it manages (Google Analytics, etc.)
  • Privacy: GTM does not collect data itself; it passes data to Google Analytics and other services

4.3 Stripe (Payment Processing)

Stripe may set cookies for secure payment processing and fraud prevention.

  • Data Collected: Transaction data, device fingerprint (for fraud detection)
  • Privacy Policy: Stripe Privacy Policy

4.4 Sentry (Error Monitoring)

Sentry may set cookies to track error and performance data for platform stability.

  • Data Collected: Error messages, stack traces, page performance
  • PII Filtering: We filter out case details and sensitive information
  • Privacy Policy: Sentry Privacy Policy

5. Cookie Consent & GDPR

Under GDPR and similar regulations, we must obtain your consent before setting non-essential cookies (analytics, preferences, marketing).

  • Essential Cookies: No consent required (necessary for functionality)
  • Analytics & Preference Cookies: Consent required before setting
  • Withdrawing Consent: You can change your consent choices at any time in your account settings or by using browser controls

6. Cookie Duration & Persistence

Session Cookies

Deleted when you close your browser (session_id, csrf_token, auth_token)

Persistent Cookies

Remain on your device for weeks, months, or years (Google Analytics _ga cookie persists 2 years)

7. Do Not Track Signals

Some browsers include a "Do Not Track" feature. We do not currently respond to Do Not Track signals, but we provide granular cookie controls through our settings and browser controls.

8. Changes to This Cookie Policy

We may update this Cookie Policy from time to time as we add new services or features. We will notify you of significant changes via email or a notice on our website.

9. Questions or Concerns?

If you have questions about our use of cookies or this policy, please contact us at:

LupaSoft Ltd (trading as CourtPilot)

Website: www.courtpilot.co.uk

Registered address: See lupasoft.co.uk

Email: privacy@courtpilot.co.uk

Subject: "Cookie Policy Inquiry"