Cookies & storage.
The exact essential storage used to keep the service working and secure.
Operator
The Boys Trip Guide is operated by Storystone Ltd, company number 16922351, registered office Cuffley Hill, Goffs Oak, Waltham Cross, EN7 5HB, England. Contact: contact@theboystripguide.com.
1. Current position
We currently use only storage that is strictly necessary to provide, secure or remember a function requested by the user. We do not use advertising cookies or non-essential analytics cookies. A consent banner is therefore not currently shown. If non-essential storage is introduced, it must remain off until valid consent is obtained.
2. Cookies and similar technologies used
| Name or technology | Provider | Purpose | Duration |
|---|---|---|---|
| Supabase authentication storage Key normally begins sb-vtcmvwixfqyxqghibsla-auth-token | Supabase | Keeps a signed-in session secure and refreshes authentication. | Until sign-out, browser data is cleared or the session/refresh token expires or is revoked. |
| btg-active-trip-v1 | The Boys Trip Guide | Remembers the active trip selected by the user. | Until cleared or replaced. |
| btg-…-seen-v1 / onboarding preference | The Boys Trip Guide | Remembers viewed items and a user's dismissed onboarding choice. | Until cleared or the related trip/account is removed. |
| btg-full-trip-intent-v1 | The Boys Trip Guide | Preserves a pending upgrade action between screens. | Current browser session. |
| Cloudflare security storage For example, a challenge or bot-management cookie when activated. | Cloudflare | Protects the service, routes traffic and records successful security challenges. | Session or the limited period set for the relevant security control. |
| Cache Storage / service worker cache | The Boys Trip Guide | Stores versioned static files so the installed web app loads reliably. | Until the cache version is replaced or browser site data is cleared. |
| Stripe Checkout storage | Stripe | Fraud prevention, payment security and checkout operation after the user chooses to pay. | Set on Stripe's domain for the period Stripe specifies. |
3. Legal basis under PECR
Strictly necessary storage does not require opt-in consent when it is essential to supply a function the user requested or to secure the service. User-requested preference storage is used only for that requested choice. We do not treat consent to the Terms or Privacy Policy as cookie consent.
4. Browser controls
You can remove site data in browser settings. This may sign you out, clear preferences or stop parts of the service working. Stripe and Cloudflare controls are managed on their domains.
5. Changes and contact
We review this page when authentication, payment, analytics, advertising or storage technology changes. Questions: contact@theboystripguide.com.
