Cookie policy
Last updated: . Read alongside our privacy notice.
1. Our approach
The ScrapOS marketing site sets no cookies at all — no analytics, no advertising and no tracking. The portal application sets a single strictly necessary session cookie once you sign in. Because we only use strictly necessary cookies, no cookie consent banner is required under PECR. If we ever add analytics or marketing cookies, we will ask for your consent first.
2. Cookies we use
| Name | Where | Purpose | Duration |
|---|---|---|---|
| DEFRA_SESSID | Portal (/app) | Keeps you signed in and protects your session. HttpOnly, SameSite=Lax, Secure over HTTPS. | Session (expires after 30 minutes idle) |
3. Local storage (not cookies)
The portal caches non-sensitive data in your browser's local storage so it keeps working when the network drops: defra_site_profile, defra_saved_carriers and defra_receipt_history. These are not transmitted to third parties and can be cleared through your browser settings.
4. Third-party requests
Pages load fonts from Google Fonts, which means your browser makes a request to Google and Google receives your IP address. We do not share any other data with Google and we set no Google cookies. We plan to self-host the fonts in a future update to remove this request. See the Google privacy policy.
5. Managing cookies
You can view, block or delete cookies in your browser settings:
Blocking the session cookie will prevent you from signing in to the portal. It does not affect the marketing site.
6. Changes and contact
We may update this policy; material changes will be posted here with a new date. Questions: privacy@scrapos.site.