1. What are cookies?
Cookies are small text files stored on your device when you visit a website. They let the site remember you across pages (so you don’t have to keep signing in, for example), and can be used for analytics, security, or advertising.
This notice covers cookies and similar technologies (local storage, session storage, tracking pixels) used on thehomepanel.co.uk.
2. Types of cookies we use
We only use two categories:
- Strictly necessary cookies: required for the site to function (authentication, security, CSRF protection, load balancing). These are always on; without them the site won’t work, so they don’t require your consent under PECR.
- Analytics cookies: help us understand how visitors use the site, anonymously. These are off by default and only set if you consent.
We do not use advertising cookies, tracking cookies for ad retargeting, or cookies set by social media plugins. We do not sell any data derived from cookies.
3. The cookies we set
Strictly necessary cookies are always on; analytics cookies only fire after you accept them in the banner and remain off if you reject.
| Name | Purpose | Type | Duration |
|---|---|---|---|
sb-access-token | Supabase authentication session — keeps you signed in across pages | Strictly necessary (first-party) | 1 hour |
sb-refresh-token | Re-authenticates your session without re-entering your password | Strictly necessary (first-party) | 7 days |
hp-consent | Remembers your cookie choice (accepted or rejected) so we don’t re-ask | Strictly necessary (first-party) | 12 months |
_ga | Google Analytics 4 — anonymised visitor identifier for aggregated traffic reporting. Set only if our Google Tag Manager container fires the GA4 tag and you have accepted analytics cookies. | Analytics (third-party, consent-gated) | 2 years |
_ga_<container_id> | Google Analytics 4 session state — set per-property, e.g. _ga_PGTSGKGK. Same consent gating as _ga. | Analytics (third-party, consent-gated) | 2 years |
We use Google Tag Manager (container ID GTM-PGTSGKGK) as a tag dispatcher. The container itself sets no cookies; any tags it fires (such as the Google Analytics 4 cookies above) are gated by Consent Mode v2 and only set once you accept analytics cookies. The exact cookies set on your device may vary depending on which features you use and whether you accept analytics. This table reflects the full set the platform can set.
4. Your consent
When you first visit, you’ll see a cookie banner. You can:
- Accept all: analytics cookies on.
- Reject all optional: only strictly necessary cookies.
- Customise: pick which categories you’re comfortable with.
Your choice is stored in the hp-consent cookie for 12 months. You can change your mind any time by reopening the preferences (link in the footer, or by clearing the cookie).
5. How to manage cookies
Beyond our consent banner, you can control cookies at the browser level:
- Chrome: Settings → Privacy and security → Cookies and other site data.
- Safari: Settings → Privacy → Manage Website Data.
- Firefox: Settings → Privacy & Security → Cookies and Site Data.
- Edge: Settings → Cookies and site permissions → Manage and delete cookies.
Blocking strictly-necessary cookies will break parts of the site (sign-in, quote submission). Blocking analytics cookies has no functional impact.
6. Legal basis
We set strictly necessary cookies on the basis of our legitimate interests in running a secure, functioning service. Under regulation 6 of PECR, these don’t require consent.
Analytics cookies are set only on the basis of your explicit consent, in line with the Privacy and Electronic Communications Regulations and ICO guidance.
7. Changes to this notice
We’ll update this notice whenever we add, remove, or change a cookie. The last-updated date at the top of the page will always reflect the latest version.
8. Contact
For any questions about cookies or tracking on this site, email info@thehomepanel.co.uk.