The short version
A cookie is a small file a website stores in your browser. Under the Privacy and Electronic Communications Regulations (PECR), a site can set "strictly necessary" cookies without asking, but needs your consent for anything else — like advertising or analytics that tracks you. Guvnor only sets strictly necessary and functional cookies, so there's nothing here that needs a consent pop-up.
The cookies we set
Strictly necessary / functional
guvnor_profile
Holds your business profile so your personalised view is there on your next visit. When you tell Guvnor about your business — your trade, location, stage and size — those answers are stored right here, in this signed cookie in your own browser, rather than in a database on our side. It means your personalisation travels with you and we don't keep a copy of your profile. The cookie is signed so it can't be altered, and it holds only the business attributes you entered — nothing sensitive. It's marked HttpOnly, Secure and SameSite=Lax.
Strictly necessary
csrftoken
A security cookie. It's set when you submit a form — for example the profile wizard — to confirm the request really came from you and not a malicious site. It carries no personal information and isn't used to track you.
Your theme preference
When you switch between light and dark mode, we remember the choice in your browser's local storage (under the name guvnor-theme). Strictly speaking that's not a cookie — it never leaves your device and is never sent to our server — but we mention it so the picture is complete. Clear your browser's site data for Guvnor and it's gone.
Analytics
To understand which pages are useful we may use a privacy-focused analytics tool that counts visits without setting any cookies and without tracking you across other websites. It doesn't build a profile of you or collect information that identifies you personally, and it never records what you type into the search box or ask Guvnor — only how many pages were viewed and which parts of the site were used. Because the analytics tool stores nothing on your device, there's no consent banner to click.
What we don't use
- No advertising cookies.
- No cross-site or third-party tracking cookies.
- No cookies that are sold or shared with data brokers.
Older visits used a cookie called sessionid. We move its saved information into guvnor_profile on your next visit, then delete the old cookie.
Managing cookies
You can delete your saved profile and start again, including when this version of the site cannot read it.
You can delete or block cookies through your browser settings at any time. If you clear the cookies for this site, you'll simply be returned to the generic, un-personalised view next time you visit — nothing breaks. For more on what we do with the information you give us, see our Privacy page.