Legal

Cookies

Draft, pending solicitor review. This is what we intend to agree with you, written plainly. It may change before launch.

Last updated 8 November 2026

The short version

Almost every cookie here is one the site needs to work: to keep you signed in, to keep payments safe, and to remember your cookie choice. There is one optional cookie, for referral tracking, and we only set it if you say yes. No analytics or advertising cookies, from us or anyone else.

Strictly necessary cookies we set

  • __Host-ck_session (clicked.cloud). Keeps you signed in. It holds a random code, not your details, and only our server can read it. Lasts: 30 days, or until you log out.
  • ck_in (clicked.cloud). Tells the menu to show "Account" instead of "Log in". It only says "1", and signs nobody in. Lasts: 30 days, or until you log out.
  • ck_consent (clicked.cloud). Remembers your cookie choice, so we don’t ask on every page. It only says yes or no to referral tracking. Lasts: 180 days (about six months), then we ask again.

The optional cookie (only if you accept)

  • ck_ref (clicked.cloud). If you arrived by a customer’s share link, remembers whose link it was (a short code, nothing about you), so they get account credit if you buy. Never used for advertising and never shared. Lasts: 30 days, or until you turn referral tracking off.

If you say no, or don't choose, nothing optional is stored on your device. A share link still works for that visit, because its code stays in the page address, but once you leave the site it's forgotten.

Cookies others set for us

  • __cf_bm (Cloudflare, who run our site). Tells people from bots, if Cloudflare’s bot protection is switched on for a visit. Cloudflare classes it as strictly necessary. Lasts: 30 minutes after you stop browsing.
  • __stripe_mid, __stripe_sid (Stripe (js.stripe.com), our card processor). Fraud prevention for your payment. Set only on the checkout page, once Stripe’s card form loads. Stripe never uses this for advertising. Lasts: About a year, and 30 minutes. Stripe’s cookie policy has the details.

Stripe's card form runs inside a frame from js.stripe.com, so your card number goes straight to Stripe and never reaches us. See Stripe's cookie policy.

Why we ask

UK law (regulation 6 of the Privacy and Electronic Communications Regulations) says a site must ask before setting cookies, except ones that are strictly necessary for a service you asked for. Signing in, paying safely and remembering your choice are strictly necessary. Referral tracking isn't, so our banner asks first. Accept and Reject are the same size and side by side, and saying no changes nothing else about the site.

Changing your mind

Use (also at the bottom of every page) to turn referral tracking on or off at any time. Turning it off deletes the referral cookie straight away.

Turning them off

You can block or delete cookies in your browser's settings. If you block ours you won't be able to sign in, and if you block Stripe's you may not be able to pay.

Questions: support@help.clicked.cloud.