Cookie Policy

This is a starting template, not legal advice. It must be kept accurate: if you add analytics, advertising or other non-essential cookies, you will need a consent mechanism (a cookie banner) under PECR and this page must be updated. Items in [square brackets] must be confirmed.

This Cookie Policy explains how eventru uses cookies and similar technologies. It should be read alongside our Privacy Policy.

What cookies are

Cookies are small text files stored on your device when you visit a website. They let a site remember your actions and preferences (such as staying signed in) over time.

The cookies we use

We currently use only strictly necessary cookies — those required to provide a service you have asked for, such as signing in securely. Under the Privacy and Electronic Communications Regulations (PECR), strictly necessary cookies do not require consent. We do not currently use advertising cookies or third-party analytics cookies.

• Authentication / session (set by our sign-in system, Auth.js) — keeps you securely logged in to your workspace. Essential. [Session/expiry duration to confirm.]
• Security — short-lived cookies used to protect sign-in and third-party connection flows (for example a CSRF state value while you connect an accounting provider). Essential; typically expire within minutes.

Analytics (cookieless)

We measure visits to our public pages (our website, event microsites, proposal pages and shared documents) using our own first-party, cookieless analytics. It sets no cookies and stores nothing on your device, so under PECR it does not require a consent banner. It counts page views and approximate visitor numbers using a rotating, non-reversible value derived in memory from your IP address and browser — your IP address is never stored. We also record the page path, the referring website’s domain, any campaign (utm) tags in the link, a coarse device type (mobile/tablet/desktop) and an approximate country. We do not build cross-site profiles and do not use this for advertising. If your browser sends a Global Privacy Control or Do Not Track signal, we do not record your visit. See the Privacy Policy for the legal basis and retention.

What we do not use (currently)

• Advertising or cross-site tracking cookies.
• Third-party analytics cookies (e.g. Google Analytics).

If this changes, we will introduce a consent banner and update this page before setting any non-essential cookies.

Managing cookies

You can block or delete cookies through your browser settings, but blocking strictly necessary cookies will stop you from signing in and using the Service.

Third-party services

When you use certain features you interact with third parties who may set their own cookies under their own policies — for example your accounting provider (QuickBooks or Xero) during connection, or your identity provider (Google, Microsoft or LinkedIn) during sign-in. Please see their cookie/privacy policies for details.

Contact

Questions about this policy? Contact us at privacy@eventru.co.uk.