Tenth Cookie notice
What this website stores in your browser, and one thing we have not got right yet.
Last updated 2026-08-20 · Black Flame Digital Ltd · Shop terms · Data processing · Privacy · Cookies · Your card
Written in-house, not by a solicitor. These documents describe what Tenth actually does, accurately and specifically, which is more than a template can. They still need a UK solicitor’s eye before real customer or shop traffic — particularly the liability, indemnity and data-protection wording.
We do not yet ask before setting analytics cookies. UK PECR requires consent for cookies that are not strictly necessary, and Google Analytics is not strictly necessary. There is no consent banner on this site today, so the analytics cookies below are set on arrival. That is a gap we know about rather than one we are hiding, and it needs closing before real customer traffic reaches the enrolment page.
Cookies we set ourselves
tenth_cid— strictly necessary, 2 years- Set when you take a card. It is a random identifier for the browser, and it does two jobs: it lets that browser download its own card, and it means scanning the counter code a second time finds the card you already have rather than issuing another one. It holds no name and nothing about you. It is
HttpOnly, so scripts on the page cannot read it. Without it the enrolment page cannot work, which is why it needs no consent. sb-…-auth-token— strictly necessary, session- Only for shop accounts. Keeps you signed in to the dashboard and the till. Set by Supabase, our authentication provider.
Google Analytics
_ga,_ga_*— analytics, up to 2 years- Google Analytics 4, measurement ID
G-2Z1LZEJP89. Counts visits and shows us which pages get used, so we know whether the enrolment page works. Set by Google; read Google’s own privacy information for what they do with it.
You can refuse it today, even without a banner from us: block third-party scripts, use a browser that blocks trackers by default, turn on “Do Not Track” in a browser that acts on it, or install Google’s own opt-out extension. Nothing on this site needs analytics to work, so blocking it breaks nothing — including taking a card.
Not cookies, but stored on your device
- The till screen remembers which staff name was last selected, in that device’s local storage, so a cashier does not re-pick it every sale. It never leaves the device by itself.
- Your card lives in Apple Wallet or Google Wallet, not in this website. Deleting cookies does not delete your card, and deleting your card does not delete these cookies.
Contact
privacy@tenthcards.co.uk