Last updated: July 2026
Short and sweet: we use only strictly necessary cookies. No advertising cookies, no third-party analytics, no tracking pixels — which is also why you won't see a cookie consent banner on this site.
Cookies are small text files stored on your device. Under the Privacy and Electronic Communications Regulations (PECR), cookies that are strictly necessary to provide a service you have asked for do not require consent — and those are the only kind we use.
| Cookie | Purpose | Duration |
|---|---|---|
| ffconnect.session_token | Keeps you securely signed in to your account (session authentication). Set when you sign in; without it, you would have to sign in on every page. | 14 days, refreshed while you use the site; removed when you sign out |
| ffconnect.session_data | A short-lived, signed copy of basic session details that avoids a database lookup on every page, making the site faster. | 5 minutes, refreshed while you are signed in |
Session cookies are marked HttpOnly (JavaScript cannot read them), Secure (sent only over HTTPS) and SameSite (not sent on cross-site requests).
Why no consent banner?Consent banners are required for cookies that are not strictly necessary. Because our only cookies are essential for signing you in, UK law (PECR Regulation 6(4)) does not require consent for them — so we don't interrupt you with a banner. If we ever introduce non-essential cookies, we will ask for your consent first and update this policy.
You can block or delete cookies in your browser settings at any time. Bear in mind that blocking our session cookie will prevent you from signing in. Guidance for popular browsers is available from the ICO at ico.org.uk.
For everything else we do with your data — and your rights over it — see our privacy policy.