Cookie Policy
Last updated 30 August 2026
Nothing that tracks you runs on this site until you say yes. Analytics is switched off by default, and stays off if you close the banner without choosing.
Your choice comes first
When you first arrive, a banner asks what we may use. Until you answer, only the strictly necessary cookies below are active — no analytics, no advertising. That is the arrangement the Privacy and Electronic Communications Regulations (PECR) require, and it is why Reject all sits next to Accept all at the same size. Rejecting is not hidden behind an extra click.
You can change your answer whenever you like using the Cookie settings button at the bottom-left of every page. If you turn something off that was previously on, we delete the cookies it had already set and reload the page.
1. Strictly necessary
These make the site work and cannot be switched off. They do not track you across other websites and are not used for advertising.
| What | Why | How long |
|---|---|---|
ff_consent | Remembers the cookie choice you made, so we don't ask again on every page. Stored in your browser, not sent to us. | 180 days |
| Session cookie | Keeps you signed in if you have an account, and keeps your basket together while you book. | Until you close the browser, or 8 hours |
| Stripe | Fraud and security checks while you pay. Set by Stripe when a payment form is shown. | Up to 1 year |
2. Analytics — off unless you accept
If you accept, we load Google Analytics 4, which tells us which pages people actually use and where they give up. We look at this in aggregate; we are not trying to identify individuals, and we have IP anonymisation switched on.
| What | Set by | How long |
|---|---|---|
_ga | Google Analytics — distinguishes one browser from another | 2 years |
_ga_<id> | Google Analytics — keeps session state | 2 years |
Google Tag Manager also loads on the page. It is a container for tags and sets no cookies of its own; it starts in Consent Mode with everything denied, and only changes if you accept.
3. Marketing — off unless you accept
If you accept, we may load the Meta (Facebook) Pixel and Google Ads tags, so we can tell whether our advertising actually brings people to the site. These are the cookies that can follow you to other websites, which is exactly why they are off until you choose otherwise.
| What | Set by | How long |
|---|---|---|
_fbp | Meta — identifies a browser for ad measurement | 3 months |
_gcl_au | Google Ads — links a click to a later order | 3 months |
Google Consent Mode
We use Consent Mode v2. In practice this means Google's tags are told before they load that storage is denied, rather than being loaded and asked to behave afterwards. If you accept, that denial is lifted; if you don't, it stays.
Fonts
Our typeface is served by Google Fonts. Loading it tells Google your IP address, in
the same way as loading any image from another website would. No cookie is set and it
happens whatever you choose on the banner, because the page needs the font to render.
If you would rather that didn't happen, most browsers allow you to block requests to
fonts.googleapis.com.
Turning cookies off in your browser
Every browser lets you block or delete cookies — usually under Settings, then Privacy. Blocking all cookies will stop the sign-in and booking basket working, because those rely on the strictly necessary ones above.
Questions about any of this?
Email trade@foxface.io or call 0333 090 7546.
Our full Privacy Policy explains what we do with
personal information generally.