Cookie Policy

This policy explains the cookies and similar technologies (such as your browser's local storage) that Pawdiary uses, on pawdiary.co.uk, app.pawdiary.co.uk, groomers' booking pages and the Pawdiary Android app.

Our approach

• Strictly necessary cookies and storage keep you signed in, keep sign-in secure and take payments. Under the Privacy and Electronic Communications Regulations (PECR, regulation 6) these don't need your consent, and they can't be switched off.
• Analytics and error reports are optional. They only run if you choose "Accept all", or switch them on under "Choose", in the banner shown on your first visit. "Reject all" is just as easy, and nothing optional runs until you've chosen.
• You can change your choice at any time with "Cookie settings" in the site footer or the button on this page. If you switch analytics off, the page reloads without it.
• We never use advertising, social media or cross-site tracking cookies, and we don't let third parties place them through our site.
• If we ever want to use storage for something new and optional, we will update this policy and ask everyone again.

Strictly necessary

• Your cookie choice (cookie, "pd_consent", on pawdiary.co.uk and app.pawdiary.co.uk): remembers what you chose in the banner, so we don't ask on every page. Kept for 12 months, then we ask again.
• Sign-in session (local storage, name starting "sb-" and ending "-auth-token"): keeps you signed in to Pawdiary. Set by our sign-in provider, Supabase. Kept until you sign out, or the session expires.
• Sign-in verifier (local storage, name ending "-code-verifier"): a one-time code that makes sure the person finishing a sign-in link or Google sign-in is the one who started it. Removed once used.
• Google connection check (session storage, "pawdiary.google-oauth-nonce"): only when a business connects Google Calendar, to confirm the connection was started in the same tab. Removed when the tab closes or the connection finishes.
• Client portal (local storage, "pawdiary-portal:" followed by the business's page name): keeps a pet owner signed in to their groomer's client portal on that device. Removed when they sign out.
• Cloudflare Turnstile: on the sign-in and sign-up pages, Cloudflare runs a check to stop automated abuse. It may use cookies or storage and collects device and browser signals only for that security check, not for advertising. See cloudflare.com/privacypolicy.
• Stripe: when you pay (for a Pawdiary plan, or a deposit to a groomer) you are taken to a payment page run by Stripe, which sets its own cookies to process the payment and prevent fraud. See stripe.com/cookies-policy/legal.

Analytics and error reports (only with your consent)

• Cloudflare Web Analytics: counts page visits, where visitors came from and how quickly pages load, so we can see which pages help people. It sets no cookies and doesn't store anything on your device or follow you across sites. See cloudflare.com/privacypolicy.
• Sentry: when something goes wrong in the app, sends a report of the error, the page and your browser type so we can fix it. It doesn't send form contents, IP addresses or session recordings. See sentry.io/privacy.

Other services

• OpenStreetMap: the route map loads map images from OpenStreetMap's servers, which receive your IP address to send them. No cookies are set.
• Google: only if a business chooses Google sign-in or Calendar sync, Google's own pages set cookies under Google's policy while you sign in with them.

Managing cookies

• Use "Cookie settings" to change your analytics choice. You can also block or delete cookies and site data in your browser settings; if you block the strictly necessary ones, you won't be able to sign in or pay.

Contact

• Questions about this policy: hello@pawdiary.co.uk.

Last updated 1 October 2026.