Handles.org Cookies Policy

Effective Date: 29/05/2025

This Cookies Policy explains how Handles Group Ltd ("**Handles," "we," "our") uses cookies and similar technologies on Handles.org and related domains (collectively, the "Site") in accordance with the UK Privacy and Electronic Communications Regulations 2003 (PECR) and the UK General Data Protection Regulation (UK GDPR).

1. What Are Cookies?

Cookies are small text files that are downloaded to your device when you visit a website. They enable the website to recognise your device and store certain information (e.g., user preferences). “First‑party” cookies are set by the Site you are visiting; “third‑party” cookies are placed by domains other than Handles.org (e.g., analytics or payment providers).

We also use local storage, session storage, and pixels which function similarly to cookies. For simplicity, we refer to all of these technologies as “cookies.”

2. Why We Use Cookies

Category

Purpose

Legal Basis

Strictly Necessary

Operate core site functions such as user authentication, account routing, and security (e.g., CSRF protection).

Contract (art. 6(1)(b) UK GDPR) / Legitimate interests

Functionality

Remember user settings (e.g., language), maintain session preferences.

Consent (where not strictly necessary)

Analytics

Collect pseudonymised statistics on how our Site is used so we can improve performance and features.

Consent

Third‑Party Integrations

Enable payment processing via Stripe and embedded social‑media content or widgets.

Consent

We do not use cookies for cross‑site behavioural advertising.

3. Cookies We Set

Below is the current list of cookies. Names may change as we refine the Service; the live cookie banner will always reflect the latest set.

Cookie Name

Provider

Type / Duration

Purpose

handles_session

Handles (1st‑party)

Strictly Necessary – Session

Maintains authenticated user session after OAuth login.

csrftoken

Handles (1st‑party)

Strictly Necessary – Session

Prevents cross‑site request forgery.

cookie_consent

Handles (1st‑party)

Functionality – 6 months

Stores a user’s cookie preferences so the banner is not shown repeatedly.

matomo_session

Matomo (1st‑party)

Analytics – 30 minutes

Tracks pages viewed for first‑party analytics.

matomo_id

Matomo (1st‑party)

Analytics – 13 months

Recognises returning visitors in anonymised form.

_stripe_mid

Stripe (3rd‑party)

Strictly Necessary – 1 year

Enables secure payment transactions and fraud detection.

_stripe_sid

Stripe (3rd‑party)

Strictly Necessary – 30 minutes

As above.

Note: We may embed widgets (e.g., YouTube, X/Twitter) on marketing pages. These providers may set additional third‑party cookies when you play content or interact with the widget. You will be prompted for consent before such cookies load.

4. Managing Cookies

When you first visit the Site, a cookie banner asks whether you accept (a) all cookies or (b) strictly necessary cookies only. You may:

1. Change or withdraw consent at any time via “Cookie Settings” in the Site footer.

2. Block cookies through your browser settings. Most browsers allow you to refuse or delete cookies.

   Warning: Blocking strictly necessary cookies may cause the Service to stop working or prevent login.

3. Opt‑out of analytics only by toggling “Analytics” off in the Cookie Settings panel or enabling “Do Not Track” in supported browsers.

5. Updates to This Policy

We will update this Cookies Policy if our use of cookies materially changes. For significant changes, we will display an in‑app notification and, where required, request fresh consent. The “Effective Date” at the top indicates when it was last revised.

6. Contact

Questions? Email privacy@handles.org or write to:

Data Protection Officer
Handles Group Ltd
Suite 5 Manor House, 1 Macauley Road
Broadstone, BH18 8AS, United Kingdom

© Handles Group Ltd, 2025.