Cookie Policy

Section 01

What cookies and similar technologies are

Cookies are small text files that a website places on your device when you visit it. They are widely used to make websites work, to remember your choices and to collect information about how a site is used.

Similar technologies work in comparable ways: for example, your browser’s local storage and session storage, tracking pixels and device fingerprinting. In this policy, ‘cookies’ includes these technologies.

Cookies set by the website you are visiting are ‘first-party’ cookies. Cookies set by another organisation, such as a video platform whose content is embedded on the page, are ‘third-party’ cookies. Session cookies are deleted when you close your browser; persistent cookies remain until they expire or you delete them.

In the UK, the use of cookies is governed by the Privacy and Electronic Communications Regulations 2003 (PECR), together with UK GDPR where cookies involve personal data.

Section 02

What this website sets today

This website does not currently set any cookies of its own, and it does not load advertising or tracking scripts. It does count visits, using a cookieless service that stores nothing on your device. See ‘Visitor statistics’ below.

Currently set by this site
Name	Provider	Purpose	Duration
None. This website does not currently set any cookies of its own.

If you choose to load an embedded video, YouTube may set its own cookies (see ‘Embedded video’ below).

Section 03

Visitor statistics

We use Vercel Web Analytics, provided by Vercel, our hosting company, to count visits to this website and see which pages are read and which links bring people here. It tells us whether our work is reaching people, for example after we share a video on social media. The homepage may show the total number of visitors over the last 30 days, taken from these statistics.

It sets no cookies and does not use your browser’s local storage, session storage or anything similar.
When a page loads, a small script served from this website sends Vercel the page address, the website that referred you, your browser, operating system and device type, and your approximate location (country, region and city).
To avoid counting the same visitor twice, Vercel uses a code calculated from your request, which it discards after 24 hours. It cannot follow you from one day to the next or across other websites, and the statistics are not linked to your IP address.
We see totals only. Nothing in these statistics identifies you.

Legal reviewNeeds adviser sign-off

Confirm before launch that cookieless, aggregate visitor statistics of this kind need no consent under PECR (including the Data (Use and Access) Act 2025 exemption for statistical purposes, once in force), the lawful basis relied on, and Vercel’s role as processor.

Section 04

Planned cookies for accounts and payments

When member accounts and payments launch, we expect to need a small number of strictly necessary cookies. These are cookies without which a service you have asked for cannot work, such as staying signed in to your account. The details below are planned. They will be confirmed, and this table updated, before any of them is used.

Planned cookiesPlanned, to confirm
Name	Provider	Purpose	Duration
Cookie name(s) (to be confirmed)	Authentication provider (planned: Supabase) (to be confirmed)	Keeps you signed in to your member account and keeps your session secure. Strictly necessary.	Duration (to be confirmed)
Set by Stripe on its own domain, not by this website	Stripe	Processes your payment securely and helps prevent fraud during Stripe Checkout.	Set by Stripe

Stripe Checkout, which will handle subscription payments and donations, runs on Stripe’s own website rather than on this one. Any cookies used while you pay are set by Stripe on its own domain and are governed by Stripe’s privacy and cookie policies, not by this website. Confirm: no Stripe scripts load on this website’s own pages (to be confirmed)

Section 05

Embedded video

Some pages include videos hosted on YouTube. To protect your privacy, they are click-to-load and never autoplay:

Before you click ‘Load video’, the page shows a placeholder. Nothing is requested from YouTube, so YouTube cannot set cookies or receive information about your visit through this website.
When you click ‘Load video’, your browser connects to youtube-nocookie.com, YouTube’s privacy-enhanced domain, and loads the video player.
Once the player has loaded, YouTube (operated by Google) may set cookies or use local storage on your device, and receives information such as your IP address, browser details and the website the video is embedded on. Privacy-enhanced mode reduces the information YouTube uses, but does not prevent this entirely, particularly once you play the video.

Choosing ‘Watch on YouTube’ opens the video on YouTube’s own website in a new tab, where YouTube’s cookie and privacy policies apply in full.

Some recordings may instead be embedded from Vimeo (player.vimeo.com, loaded with Vimeo’s “do not track” setting) or, for podcast episodes, Spotify (open.spotify.com). The same rules apply: nothing is requested from the provider until you choose to load the player, and once it has loaded that provider’s own cookie and privacy policies apply. Podcast hosts that do not allow embedding are shown as plain links only.

Google’s privacy policy explains how it uses this information: policies.google.com/privacy.

Section 06

Under PECR, cookies that are strictly necessary to provide a service you have asked for, such as keeping you signed in, do not need your consent. We will still tell you about them in this policy.

We will not use any other cookies (such as analytics, preference or advertising cookies) unless you have given your consent first. If we ever propose to use them:

we will ask before setting them, with options to accept or reject that are equally easy to use;
no non-essential cookie will be set before you make a choice, and pre-ticked boxes will not be used;
you will be able to change your choice at any time through Location of cookie settings, e.g. a ‘Cookie settings’ link in the footer (to be confirmed); and
this policy and the tables above will be updated before any such cookie is introduced.

Legal reviewNeeds adviser sign-off

Confirm before launch:

whether the click-to-load notice shown on each video is sufficient before YouTube can set cookies or use local storage, or whether a fuller consent step is needed;
the final names, providers and durations of strictly necessary cookies once providers are chosen; and
the consent tool, and where visitors can change their choice, before any non-essential cookie is introduced.

The Data (Use and Access) Act 2025 adds some limited new exemptions from the consent requirement (for example, for certain analytics) once in force. This draft commits TSP to asking for consent for anything beyond strictly necessary cookies in any case.

Section 07

Managing cookies in your browser

Most browsers let you see which cookies are stored, delete them, and block cookies from all websites or from particular ones. You can usually find these options in your browser’s settings or help pages, under ‘privacy’ or ‘cookies’.

Blocking all cookies may stop some websites from working properly. Once member accounts launch, blocking strictly necessary cookies from this website will prevent you from signing in.

You can clear cookies and local storage set by YouTube through your browser settings, and manage your Google privacy settings in your Google account.

Section 08

Changes to this policy

We will update this policy whenever we change the cookies or similar technologies this website uses, in particular before member accounts and payments launch. The ‘last updated’ date at the top of this page shows when it was last changed.

Section 09

Contact

If you have questions about this policy or our use of cookies, email enquiries@tspmedia.org.uk. Our Privacy Policy explains how we handle personal data and the rights you have.

Email: enquiries@tspmedia.org.uk
Post: Legal entity name (to be confirmed), Registered address (to be confirmed)