Last updated: 23 August 2026 · Version 2.1
1. About this policy
This Cookie Policy explains how The Noble House of Brattleby uses cookies and similar technologies on brattleby.com. It complies with the UK Privacy and Electronic Communications Regulations 2003 (PECR), the UK GDPR and the EU ePrivacy Directive. It should be read alongside our Privacy Notice.
2. What is a cookie?
A cookie is a small text file placed on your device when you visit a website. Cookies allow the website to recognise your device, remember preferences, and improve your experience. Similar technologies include local storage, session storage, web beacons and pixel tags — all of which are covered by this policy.
3. Categories of cookies we use
3.1 Strictly Necessary (always on)
Essential for the website to function. Cannot be disabled.
| Name | Purpose | Duration |
|---|---|---|
| brattleby:consent-v2 | Stores your cookie preferences. This is browser localStorage, not a cookie, and is never transmitted to our servers. | Until you clear it |
| sb-access-token | Authentication for member areas | Session |
| sb-refresh-token | Maintains login session | 30 days |
| device_id | Anonymous identifier for The Door & gamification | 12 months |
3.2 Functional (opt-in)
Remember preferences such as language, accessibility settings, ambient audio levels.
| Name | Purpose | Duration |
|---|---|---|
| audio_pref | Ghost Stories & Sound Map volume settings | 6 months |
| a11y_motion | Reduced-motion accessibility preference | 12 months |
3.3 Analytics (opt-in)
This website uses Google Analytics 4 (Google Ireland Limited), and nothing else, for analytics. It runs under Google Consent Mode v2 withanalytics_storage set to denied by default. Until you give explicit consent, analytics storage is blocked and none of our conversion events (enquiry, newsletter, patronage, purchase) are sent. Where Google's tag library is present on a page, it may still send limited cookieless consent-mode signals to Google before consent; we do not claim that nothing at all reaches Google before you decide.
Once accepted, GA4 may set its own first-party cookies (typically _ga and_ga_<container>, up to 24 months) and may use browser storage to keep a randomly generated client identifier. It records page addresses and titles, referrer, approximate location derived from IP, device, browser and language, and the interaction events described in this policy (for example an enquiry submission or a completed patronage payment). We never send names, email addresses, message contents, payment identifiers or session identifiers to GA4.
The purpose is to measure which pages and appeals actually work. We do not claim that this data is anonymised or cookieless, and we do not control what Google may do with it as an independent processor under its own terms. You may withdraw consent at any time through the banner, which stops further collection.
3.4 Marketing (opt-in)
We currently do not use any third-party marketing or advertising cookies. We do not participate in cross-site tracking, retargeting, or behavioural advertising networks.
4. Third-party services
Some pages embed content from third parties who may set their own cookies:
- Stripe — fraud prevention on ticketing/payment pages.
- YouTube / Vimeo — only on pages embedding videos (ceremonial recordings, podcast episodes).
- Google Fonts — self-hosted on our servers; no cookies set.
Each third party has its own privacy and cookie policy.
5. Managing your preferences
You may manage cookies in three ways:
- Our cookie banner — appears on first visit; reopen it at any time from the "Cookie settings" link in the footer, or by clearing the
brattleby:consent-v2entry in your browser's local storage. - Your browser settings — most browsers allow you to block, delete, or restrict cookies.
- Do Not Track — we honour browser DNT signals where technically feasible.
Disabling strictly necessary cookies will impair website functionality (login, basket, accessibility). Disabling analytics cookies has no functional impact.
6. Browser instructions
7. Changes to this policy
We review this Cookie Policy at least annually and whenever we add or remove technologies. The "last updated" date above always reflects the current version.
8. Contact
Questions concerning this policy may be addressed to the Private Office at privacy@brattleby.com.