Cookie Policy
Effective from 2026-09-12
This document is a working draft pending legal review. The final wording may change.
You can review or change your consent at any time:
1. What cookies are
Cookies are small text files stored on your device when you visit a website. We also use similar technologies (e.g. local storage) to make the site work and to understand how it is used.
2. Necessary cookies
These are essential for the site to work and require no consent: keeping your session and login, CSRF protection, payment processing (Stripe), remembering your cookie choice, and Cloudflare security/delivery. Without them the site cannot function correctly.
3. Analytics cookies
We use PostHog to understand how the site is used (statistics on visits and interactions) and Sentry for technical error reports. These tools load only if you consent via the cookie banner.
Cookie declaration
The specific cookies we use, grouped by category:
Strictly necessary
| Name | Provider | Purpose | Retention |
|---|---|---|---|
| open-play-session | OPEN PLAY | Keeps your session and keeps you signed in. | Up to 30 days (sliding session) |
| XSRF-TOKEN | OPEN PLAY | Protects forms against cross-site request forgery (CSRF). | Up to 30 days |
| cc_cookie | OPEN PLAY | Remembers your cookie choices. | 182 days (6 months) |
| op_at_no | OPEN PLAY | Remembers that you objected to our internal marketing attribution. | Up to 1 year |
| op_ph_reset | OPEN PLAY | One-time logout signal that separates analytics identities on shared devices. | Until the next consented analytics session, up to 1 year |
| __cf_bm, cf_clearance | Cloudflare | Security, bot mitigation and content delivery. | 30 min - 1 year |
| __stripe_mid, __stripe_sid | Stripe | Secure payment processing and fraud prevention. | 30 min - 1 year |
Analytics (consent required)
| Name | Provider | Purpose | Retention |
|---|---|---|---|
| op_at | OPEN PLAY | Links visits through our campaign links to a later registration, only after consent. | Up to 30 days |
| ph_* | PostHog | Anonymous usage statistics - loaded only after you consent. | Up to 1 year |
Advertising measurement (when enabled and separately consented to)
| Name | Provider | Purpose | Retention |
|---|---|---|---|
| _gcl_* | Links an advertising interaction to a confirmed booking, only when measurement is active and you consent. | Up to 90 days |
Sentry (technical error reporting) receives error telemetry only when you consent to analytics and sets no cookies.
4. Control and choice
On your first visit you can accept or decline analytics cookies via the banner. You can change your choice at any time from the banner, and manage/delete cookies through your browser settings. Necessary cookies cannot be disabled.
5. Changes to this policy
We may update this policy when the technologies we use or the law change. The current version with its effective date is always available on this page.
Google Ads measurement
When this feature is enabled, we load Google Ads only after your separate consent to advertising measurement. We use it to understand which ads lead to confirmed online bookings. Refusing does not affect sign-in, bookings or payments. We do not use this category for personalized advertising.
Google may receive the visited page address, including the booking reference, IP address, browser and device information, and advertising identifiers. The confirmed-booking event contains a random identifier to prevent duplicate counting, not your name, email, phone number, access PIN or payment secret.
You can withdraw consent through “Manage cookies”. This stops future measurement and deletes advertising cookies accessible to this site, but does not automatically erase data already received by Google. Google’s policies explain its processing and retention of that data.
How Google uses information from sites that use its services