Back to homepage

Cookie policy

1. What are cookies?

Cookies are small text files a website places on your device. The UK Privacy and Electronic Communications Regulations (PECR) and UK GDPR treat browser localStorage and sessionStorage the same as cookies — the same consent rules apply to all of them.

2. Strictly necessary

These are set without your consent because the site cannot function without them. They cannot be switched off from the cookie preferences panel.

VendorWhat it doesKeyTypeRetentionData destination
Napp Tech LtdStores your cookie consent choices for this sitenapp-consentCookie180 daysFirst-party only
Cloudflare Inc (US)Bot protection for the sign-up and enquiry forms. A challenge token is verified server-side; no cookie is written to your browser by this service.None — challenge token onlySession tokenSessionCloudflare, US — Privacy policy
itoms Ltd (UK)Records your consent choice within the embedded itoms updates widgetitoms_consentCookieSessionitoms Ltd, UK
itoms Ltd (UK)Prevents the widget's intro animation replaying on every page viewitoms_anim_seen_<slug>localStoragePersistent (until localStorage is cleared by you or your browser)First-party only
itoms Ltd (UK)An anonymous identifier that links your votes within the widget across sessions. This key is stored on the app.ito.ms origin and cannot be deleted by napp.tech scripts.itoms_voter_idlocalStorage on app.ito.msPersistent (until localStorage is cleared by you or your browser)itoms Ltd, UK

3. Analytics

These are only set after you choose to accept analytics cookies. They help us understand how visitors use the site so we can improve it. Nothing is sent to these vendors before you give consent.

VendorWhat it doesKeyTypeRetentionData destination
Microsoft Corporation (US) — ClarityRecords anonymised session replays and heatmaps so we can understand how visitors interact with the site_clckCookie1 yearMicrosoft, US — Privacy statement
Microsoft Corporation (US) — ClarityClarity tab-level session identifier_cltksessionStorageSessionMicrosoft, US
Google LLC (US) — Google Analytics 4Tracks page views and sessions to help us understand site usage_gaCookie2 yearsGoogle, US — Privacy policy
Google LLC (US) — Google Analytics 4GA4 session tracking for measurement property G-40KGHP3BGP_ga_40KGHP3BGPCookie2 yearsGoogle, US

4. International transfers

Microsoft (Clarity) and Google (Analytics) process data in the United States. Both rely on Standard Contractual Clauses recognised by the ICO as a lawful safeguard for UK-to-US transfers. Cloudflare processes Turnstile challenge tokens in the US under the same mechanism. itoms Ltd is UK-based.

5. Your rights

You have the right to access, correct, or request erasure of personal data held about you. Contact us at hello@napp.tech. You may also complain to the Information Commissioner's Office at ico.org.uk.

6. Changes to this policy

When we add or remove a vendor, or change how we use cookies, we update this page, increment the consent version (which asks every visitor to choose again), and revise the date at the top. Previous versions are available on request.