Skip to content
Gaff

Legal

Cookies.

Short version: this website sets none. Here’s everything the site and the apps keep on your device, why, and how to get rid of it.

Last updated

On this page
  1. 01The short version
  2. 02The website
  3. 03The apps
  4. 04Built in, switched off
  5. 05How to clear it
  6. 06Changes

The short version

  • gaffr.uk sets no cookies and writes nothing to your browser. That’s why there’s no cookie banner: there’s nothing to ask you about.
  • The apps keep your sign-in on your phone, so you stay signed in, plus files you open or upload while you use them. The rest of the list below belongs to your phone or to the services the apps need to work, and the apps run a couple of security checks on your phone.
  • No advertising cookies, tracking pixels or ad IDs. Not on the site, not in the apps.

The website

  • Cookies

    Set
    None. Neither the site’s code nor its responses set a cookie.

  • Browser storage

    Set
    Nothing written to local storage, session storage or anywhere else.

  • Analytics

    What
    Vercel Web Analytics counts page views without cookies. Vercel tells visits apart with a code built on its servers from your request, and throws the code away after 24 hours.
    On your device
    Nothing. Vercel’s script checks your browser for one setting of its own (“__va_attribution”), which only exists if a website asks Vercel to identify its visitors. We never do, so it finds nothing and writes nothing.
    Opt out
    A content blocker stops the analytics script, and the site works exactly the same without it.

  • Everything else

    Set
    Nothing. Fonts come from gaffr.uk itself, not Google. No ad tags, social media pixels, embedded videos or chat widgets.

Our host, Vercel, sees your IP address and browser details when you load a page. That’s how web servers work, not something stored on your device. The privacy policy covers it.

The apps

The rules on cookies cover anything an app stores on or reads from your phone, so here’s the full list for Gaffr and Gaffr Live.

  • Your sign-in

    What
    The sign-in tokens Supabase, our sign-in provider, gives your phone. They’re kept in a small database file inside the app’s own private storage.
    Why
    So you stay signed in when you close and reopen the app.
    Type
    Essential
    Cleared
    When you sign out, or uninstall the app.

  • Maps

    What
    Mapbox’s map software keeps a cache of map images on your phone, along with its own settings.
    Why
    So maps load quickly and work on a weak signal.
    Type
    Essential
    Cleared
    When you uninstall the app.
    Also
    Mapbox’s software sends Mapbox its own usage data. Tap the ⓘ in the corner of a map to turn that off.

  • Payments (Gaffr app)

    What
    When you add a card, Stripe’s payment software collects information about your device to help spot fraud, under Stripe’s own privacy policy.
    Why
    To take card payments safely.
    Type
    Essential

  • App updates

    What
    Updates to the app, downloaded from Expo and kept inside the app, plus a random ID for the install that Expo’s update software creates and sends with each update check.
    Why
    So you get fixes without waiting for an app store release.
    Type
    Essential
    Cleared
    Replaced by the next update, or on uninstall.

  • Files you open or upload

    What
    Receipt PDFs you open in the Gaffr app, and photos you take or pick for your documents or a report in Gaffr Live, are saved in the app’s temporary files.
    Why
    So your phone can show, share or upload them.
    Type
    Essential
    Cleared
    When your phone clears the app’s temporary files, or on uninstall.

  • Security checks (Gaffr Live)

    What
    On iPhone, the app checks for signs the phone has been jailbroken: whether the Cydia app is installed and whether code is being injected into the app. On a shift, it reads whether your phone reports its location as faked.
    Why
    To protect accounts and stop faked arrivals. The results go to our server; the privacy policy says what happens next.
    Type
    Essential (security)

  • Notifications, location and camera

    What
    Your phone’s operating system holds your push token and remembers whether you allowed location, notifications and the camera. The apps ask; your phone keeps the answer.
    Type
    Essential
    Control
    Your phone’s settings, any time.

Built in, switched off

The apps contain code for two more things that would touch your phone. Neither is switched on.

  • PostHog, product analytics, would store an ID on your phone to recognise the same install.
  • Sentry, crash reporting, would keep details of an app error on your phone until it can send them to us.

Before either goes on, this page changes, and where the law needs your permission we’ll ask for it first.

How to clear it

The website

It stores nothing, so there’s nothing to clear. Your browser’s own settings clear everything any site has stored, if you want to be thorough.

The apps

  • Sign out to clear your sign-in from the phone.
  • Uninstall to remove everything the app stored.
  • Your phone’s settings control location, notifications and the camera.
  • Neither removes your account or what we hold about you. For that, use Settings → Delete account; the privacy policy says what happens next.

Our team’s admin site

Gaffr’s own staff sign in to an admin website that uses essential sign-in cookies. It isn’t open to clients, crew or the public.

Changes

If what we store changes, this page changes first, and the date at the top moves. Questions: hello@gaffr.uk.