Cookie Policy
Which cookies Template sets, what each one is for, and how to change your choice at any time
Version 1.6 · Last updated 2026-08-22
1. What cookies and similar technologies are
A cookie is a small text file that a website asks your browser to store on your device. On each later request the browser sends it back, which is how a site can remember which language you picked, or that you are signed in.
"Similar technologies" covers anything else that stores or reads information on your device, or that identifies your browser without storing anything, such as local storage or a script that measures page views. We use the phrase throughout this policy because three of the analytics tools listed below work without setting any cookie at all, and the law still applies to what they do.
This policy covers full.fishwiththemoon.uk. It does not cover the sites we link to, or the pages our payment provider hosts on its own domains.
2. The cookies we set
The tables below list the cookies Template sets directly, together with the analytics cookies our providers set on our instructions. They are not an exhaustive list of everything a third party may set: where a provider sets further cookies of its own, we say so and link to that provider's documentation rather than reproduce a list we have not verified.
Which of these you actually get depends on what you do on the site and on which features are switched on: you will not receive a session cookie unless you sign in, and you will not receive any analytics cookie unless you have consented to the analytics category.
Set by Template
| Name | Category | What it is for | How long it lasts |
|---|---|---|---|
PARAGLIDE_LOCALE | Strictly necessary | Records the language you chose, so that pages load in that language on your next visit | 400 days |
cookie_consent | Strictly necessary | Records your cookie choice: the version of the notice, whether you allowed the analytics category, and when you decided. It is what stops the banner appearing again, and what the site checks before loading any analytics script | 365 days |
sidebar_state | Strictly necessary | This cookie is written when you expand or collapse the sidebar on a desktop-sized screen. It is currently written but not read back: the sidebar always loads collapsed, so the value has no effect on what you see. We keep writing it because restoring that preference is a change we may make, and the value is a single word you chose yourself | 7 days |
better-auth.session_token | Strictly necessary | This cookie holds your session token and is what keeps you signed in between requests. Over HTTPS the browser receives it under the name __Secure-better-auth.session_token; the __Secure- prefix is added in production and is absent only on plain-HTTP local development | 7 days |
better-auth.session_data | Strictly necessary | This cookie is a short-lived cache of your session, used so that the service does not have to query the database on every single request | 1 hour |
Set by our analytics providers
These are only set if you have consented to the analytics category, and only if that particular tool is configured for this site.
| Name | Category | What it is for | How long it lasts | Set by |
|---|---|---|---|---|
_ga | Analytics | Distinguishes one visitor from another | 2 years | Google Analytics 4 |
_ga_<container-id> | Analytics | Keeps the state of the current analytics session | 2 years | Google Analytics 4 |
_clck | Analytics | Keeps a Clarity user identifier and your preferences for this site, so that repeat visits are attributed to the same user | Not published by the provider | Microsoft Clarity |
_clsk | Analytics | Links several page views by the same user into a single Clarity session recording | Not published by the provider | Microsoft Clarity |
Two notes on that second table.
Microsoft does not publish an expiry for _clck or _clsk in its own cookie
documentation, so we do not state one. Figures circulating elsewhere are not
confirmed by Microsoft. Clarity may also set further identifier cookies that
it shares with other Microsoft services; Microsoft lists them at
learn.microsoft.com/clarity/clarity-cookies,
and we point you there rather than reproduce a list we have not verified
ourselves.
Plausible and Umami set no cookies at all. Where either is configured for this site, it measures page views without writing anything to your device — no cookie, no cache entry, no local storage — and without a persistent identifier. Because nothing is stored on or read from your device, the consent rules that apply to cookies do not apply to them, and they run on our legitimate interest in knowing which pages are used. They process your IP address to work out an approximate country and then discard it; they build no profile of you and follow you to no other site.
Cloudflare Web Analytics also sets no cookies. It differs from the two
above in one way worth stating plainly: it is switched on for the whole site
at our CDN provider rather than configured in the application, so it is
present on every page, including the embedded tools served under /embeds.
Cloudflare's own documentation states that its beacon uses no client-side
state — no cookie, no local storage — and does not fingerprint you through
your IP address, User Agent or anything else. It reports the page path, the
referring link, an approximate country, device type, browser, operating
system and page-speed measurements. The same reasoning applies as above:
nothing is stored on or read from your device, so the consent rules for
cookies do not reach it, and it runs on our legitimate interest in knowing
which pages are used and how quickly they load.
This means the analytics toggle does not control them. It governs the cookie-setting providers listed in the table above. Declining, or never answering the banner, stops those and leaves the cookieless measurement running. Section 4 explains what you can do about that.
Cookies we do not control
This policy covers what happens on full.fishwiththemoon.uk. It does not cover cookies set on a third-party site we link to, or any further cookie a provider named above sets beyond the ones listed here. Those are governed by that party's own cookie and privacy policies, not by this one.
Checkout and the customer portal are one such case: our payment provider hosts them on its own domains, and any cookie set there is set by that provider under its own policies.
3. The categories we use
Strictly necessary
These make the site work: remembering your language, remembering your cookie choice itself, keeping you signed in. They do not track you, and they are not used for advertising.
They cannot be switched off through the banner, because without them the service cannot do what you asked it to do. You can still block them in your browser, but parts of the site will stop working.
Analytics
These tell us which pages are used and where people get stuck, so we can improve the product. The providers in this category set cookies, so they are only loaded after you consent, and they are never loaded before the banner has been answered.
Cookieless measurement is not in this category and is not covered by the toggle, for the reason given in section 2.
You can withdraw this consent at any time; see section 4.
Marketing
These would be set by advertising partners to build a profile of your interests and to measure advertising campaigns across sites.
This site does not use them. No advertising or remarketing technology is installed. If that ever changes, this policy and the consent banner will be updated first, and we will ask for your consent before any such cookie is set.
4. How to manage your choices
The banner. On your first visit you are asked to accept or reject the analytics category, or to open the preferences dialog and choose per category. The reject button carries the same visual weight and takes the same single click as the accept button, and nothing in the analytics category is loaded until you have chosen. The banner appears only where a cookie-setting analytics provider is configured; a site running only cookieless measurement has nothing to ask you and shows no banner.
The "Cookie preferences" link. Where analytics is in use on this site, a "Cookie preferences" link is available on every page: at the bottom of the footer on our public pages, and at the bottom of the page on pages that have no footer, such as the sign-in and account pages. Use it to change your mind or to withdraw consent entirely, at any time, without contacting us. When you withdraw consent, the page reloads so that any analytics script already running is stopped, and the analytics cookies we know about are removed.
Your browser. Every major browser lets you block or delete cookies: Chrome, Firefox, Safari and Edge. Blocking strictly necessary cookies will break sign-in and other basic functions.
Opting out at the provider. Independently of the choice you make here:
- Google Analytics offers a browser add-on that opts you out on every site: tools.google.com/dlpage/gaoptout.
- Microsoft Clarity is covered by the Microsoft privacy statement, which explains the controls Microsoft offers: privacy.microsoft.com.
- Cloudflare Web Analytics sets no cookies and does not fingerprint you, so there is nothing to opt out of at its end either, and rejecting the analytics category does not stop it. A browser-level content blocker will stop the beacon, and you can object to us at support@fishwiththemoon.uk under Article 21 of the UK GDPR. Cloudflare's handling of the data is covered by its own policy: cloudflare.com/privacypolicy.
- Plausible and Umami set no cookies and build no cross-site profile, so there is nothing to opt out of at their end, and rejecting the analytics category does not stop them. If you object to this measurement, a browser-level content blocker will stop the script, and you can contact us at support@fishwiththemoon.uk to exercise your right to object under Article 21 of the UK GDPR.
5. If you say no to analytics
Nothing breaks. Every feature of Template works exactly the same whether you accept analytics or not. We do not restrict content, degrade the service, or keep asking. The only difference is that no analytics cookie is placed on your device and your visit is not counted by the cookie-setting providers. Cookieless measurement, which stores nothing on your device either way, continues; section 2 explains why and section 4 explains how to object.
6. Changes and contact
We update this policy whenever the set of cookies changes. Where a change is material we will ask for your consent again through the banner. The version number and date at the top of this page tell you which text is currently in force.
For anything about cookies, or about privacy generally, write to support@fishwiththemoon.uk. Our full privacy notice is the Privacy Policy.
FISH WITH THE MOON LTD Office 15727 Initial Business Centre, Unit 7 Wilson Business Park, Manchester, United Kingdom, M40 8WN