Cookie policy
What we store on your device, why, and how to control it β written in plain English. Last updated: 20 April 2026. Version 1.1.
π The short version
- We use only strictly necessary cookies β the minimum required to keep the site working and secure.
- We do not use Google Analytics, Microsoft Clarity, Hotjar, Meta Pixel, TikTok Pixel, or any other tracking/retargeting tool.
- We do not sell or share cookie data with advertisers.
- Your browser’s localStorage is used to save your incomplete quote-form draft on your device β it never reaches us.
- You can clear everything at any time via your browser settings.
1. What is a cookie?
A cookie is a small text file that a website places on your device (computer, phone, tablet) so the site can remember something about your visit. Similar technologies include localStorage (another form of browser storage) and pixels (tiny invisible images used for tracking). This policy covers all of them.
Under UK PECR (Privacy and Electronic Communications Regulations) websites need your consent to set any cookie that isn’t strictly necessary for the service you’re using. Analytics and advertising cookies always require consent. Strictly necessary cookies don’t β because the site literally can’t work without them.
2. Our honest cookie stance
Most comparison sites load 30β60 tracking cookies the moment you land on them. Findfitter is different by design: we don’t need to follow you around the internet to help you get a quote. The only things that live on your device when you visit us are security essentials and (if you start the quote form) a local draft of your own answers.
We believe this is both more respectful and β practically β faster. Fewer cookies means a lighter, quicker page.
3. Cookies we actually set
| Name | Purpose | Provider | Expires | Consent needed? |
|---|---|---|---|---|
| wordpress_test_cookie | Confirms your browser can store cookies β needed on admin login only. Most visitors never see it. | WordPress (first-party) | Session | No β strictly necessary |
| __cfduid / cf_clearance | Cloudflare security β identifies trusted traffic and blocks malicious bots attacking the site. | Cloudflare (first-party) | Up to 30 days | No β strictly necessary |
| cf_chl_* / cf_turnstile_* | Set only when the form anti-bot check is active β confirms you’re a human without profiling you. | Cloudflare Turnstile | Session or up to 30 minutes | No β strictly necessary |
That’s the full list. No analytics, no advertising, no social-media trackers.
4. Similar technologies we use
localStorage (quote form draft)
When you start filling in our quote form, we save your progress to your browser’s localStorage under the key ff_draft. This means if you accidentally close the tab or navigate away, you can pick up where you left off.
- What’s in it: the form fields you’ve filled in so far (name, postcode, product, etc.) β nothing else.
- Where it lives: your browser only. It never travels to our server unless you hit submit.
- When it’s cleared: automatically the moment you submit the form, or when you clear your browser’s site data.
To clear it manually right now: open your browser’s developer tools β Application β Local Storage β this site β delete the ff_draft entry. Or just clear browsing data for the last hour.
5. What we don’t use β and why it matters
For complete transparency, here’s what’s not running on this site:
- β Google Analytics / Google Tag Manager
- β Microsoft Clarity / Hotjar / session-recording tools
- β Meta (Facebook) Pixel
- β TikTok Pixel
- β Google Ads conversion tracking / remarketing
- β LinkedIn Insight Tag
- β Third-party A/B testing (Optimizely, VWO, etc.)
- β Live-chat widgets that set tracking cookies
- β Social share buttons that phone home before you click them
If we ever add any of these (we’d only consider privacy-friendly options like Plausible or Fathom), we will: update this policy at least 30 days beforehand, add a consent banner for any cookie that isn’t strictly necessary, and make sure you can use the whole site without accepting them.
6. How to manage cookies in your browser
Every modern browser lets you view, block, and delete cookies. Direct links:
- Chrome: support.google.com/chrome/answer/95647
- Safari (macOS/iOS): support.apple.com/en-gb/guide/safari
- Firefox: support.mozilla.org/en-GB/kb/cookies
- Microsoft Edge: support.microsoft.com/en-gb/microsoft-edge
- Brave: built-in shields block trackers by default β settings β Shields.
Heads up: blocking strictly necessary cookies may stop the quote form from submitting β because the Cloudflare security check needs to work before we’ll accept your data. Everything else on the site will continue to function without any cookie at all.
7. Third-party resources we load
A few page assets come from third parties. Where possible we load them from privacy-respecting endpoints:
- Google Fonts β used for typography. We load them directly and don’t pass you through Google’s tracking layer.
- YouTube (youtube-nocookie.com) β when you click play on a customer story or buyer-education video we load YouTube’s no-cookie embed. No YouTube cookies are set until you click play, and even then we use the
youtube-nocookiedomain which sets fewer cookies. - Cloudflare Turnstile β loads only on the quote form; verifies you’re a human without using third-party tracking cookies.
8. Do Not Track (DNT) and Global Privacy Control (GPC)
Because we don’t use tracking cookies, there’s nothing for DNT or GPC to opt you out of β the answer is always “we weren’t tracking you anyway.” If we ever add optional analytics, we’ll honour these signals by default (i.e. no consent banner needed if your browser already tells us no).
9. Changes to this policy
We’ll update this page whenever we add, remove, or change any cookie. Material changes get a banner at the top of the page for at least 30 days. The version number and date at the top tell you what’s currently live.
- v1.1 β 20 April 2026: comprehensive rewrite; removed incorrect references to analytics/ad tools we don’t use; added localStorage and third-party embed disclosures.
- v1.0 β launch (April 2026): initial policy.
10. Contact us
Questions about cookies on this site? Email privacy@findfitter.co.uk. We’ll respond within 2 working days (and always within the 30-day UK GDPR deadline).
Related: Privacy policy Β· Terms & conditions Β· Contact us
Sources & UK cookie-law references
- Privacy and Electronic Communications Regulations 2003 (PECR) — the primary UK cookie law
- ICO — cookies and similar technologies guide
- ICO — cookies, for the public
- Data Protection Act 2018 (applies to any personal-data cookies)
- Global Privacy Control (GPC) — browser-level privacy signal we honour