Cookie Policy
Last updated: 6 September 2026
This policy explains the cookies and similar storage Counterpass uses. A cookie is a small file stored on your device; local storage is a similar browser mechanism. Today we use only strictly-necessary and security items — we do not use analytics, advertising or tracking cookies.
What we use
| Name | Set by | Purpose | Type | Expiry |
|---|---|---|---|---|
| __session, __client_uat, __clerk_* | Clerk (authentication) | Keeps venue users signed in and secures the session | Strictly necessary / security | Session – 1 year |
| __clerk_environment, clerk_telemetry_throttler (local storage) | Clerk (authentication) | Caches sign-in configuration and rate-limits Clerk's own service telemetry | Strictly necessary / operational | Persistent (until cleared) |
| cp-cookie-consent (local storage) | Counterpass | Remembers that you have seen this cookie notice | Strictly necessary | Persistent (until cleared) |
| cp_dunning_pastdue_dismissed (session storage) | Counterpass | Remembers that a signed-in venue user dismissed the billing-reminder banner (venue dashboard only) | Strictly necessary / operational | Session (until the tab is closed) |
| __stripe_mid, __stripe_sid | Stripe (checkout.stripe.com) | Fraud prevention while you pay. Set on Stripe's own hosted payment pages — paying redirects you to Stripe; these are not set on Counterpass pages | Strictly necessary / security | Session – 1 year (on Stripe's site) |
| Cloudflare Turnstile (no first-party cookies) | Cloudflare (challenges.cloudflare.com) | Distinguishes humans from bots on the checkout form. Runs inside Cloudflare's own iframe; any state it uses stays in that third-party security context — it sets no cookies or storage on Counterpass pages | Security | Managed by Cloudflare within its iframe |
Do we need your consent?
Under PECR (as amended by the Data (Use and Access) Act 2025, in force 5 February 2026), strictly-necessary and security cookies do not require consent. Because that is all Counterpass currently sets, we show a brief notice for transparency rather than a blocking consent banner. If we ever introduce analytics or advertising cookies, we will ask for your consent first and block them until you agree.
Your choices
You can review this notice again at any time using the link in the footer, or by adjusting your browser settings to block or delete cookies. Blocking strictly-necessary cookies may stop parts of the service working.
More information
For how we handle personal data more generally, see our Privacy Policy. Questions about this policy can go to privacy@counterpass.co.uk.