Cookies
Version 1.1 · in force from 19 September 2026
Short, because there is not much to say. This notice covers the Privacy and Electronic Communications Regulations (PECR) and the UK GDPR.
1. There is no cookie banner, and that is deliberate
We set no analytics, advertising or tracking cookies at all. Consent is required for cookies that are not strictly necessary, and we do not set any, so there is nothing to ask you about.
A banner here would be a box to click that changed nothing, and a consent record for a choice that did not exist. If we ever add analytics, this notice changes and a real banner appears with rejecting exactly as easy as accepting.
2. What we do set
- sessionid
- Strictly necessary. Keeps your part-finished order and your recording in progress attached to you. Expires when you close the browser.
- csrftoken
- Strictly necessary. Stops a third-party site posting our forms on your behalf. 12 months.
Both are set by us, are strictly necessary, and do not need consent. Neither is used to identify you across sites.
3. The page behind the seal
The page a child taps loads nothing from any third party (no fonts, no scripts, no images from anywhere but here) and sets no cookie of its own. It is the strictest page on the site on purpose.
4. Browser controls
You can block or delete cookies in your browser settings. Blocking ours will stop parts of the site working, including keeping a part-finished order and the recording step.
5. Contact
Questions: hello@tapapost.co.uk.