Cookie & Storage Technology Policy

Version 2026-08-09 · Last updated 8 August 2026

Cookie & Storage Technology Policy

Cookies, pixels, web storage, scripts, tags and how consent works.

1. Technologies in scope

RoadLux maintains an accurate inventory of technologies actually used.

This applies not only to traditional cookies but potentially other storage and access technologies such as pixels, web storage, scripts, tags and device-fingerprinting techniques.

2. Categories

Strictly necessary

  • May include technologies genuinely required for authentication, security, sessions, checkout, fraud prevention and core functionality.

Preferences

  • Used to remember appropriate customer choices.

Analytics

  • Used to understand service usage where legally permitted.

Marketing

  • Used for advertising and measurement where legally permitted.

3. Cookie consent

Where prior consent is required, the relevant technology is not activated before valid consent.

RoadLux provides ACCEPT ALL, REJECT NON-ESSENTIAL and MANAGE PREFERENCES.

The ICO’s current guidance says organisations must tell users about storage and access technologies and obtain prior consent unless an exception applies.

Simply continuing to browse is not treated as consent where consent is required.

4. Cookie inventory

Admin maintains the actual technology/cookie name, provider, purpose, category, duration, first/third-party status and whether consent is required.

Current inventory

  • Authentication session storage — Supabase (first party, essential, retained for the life of the signed-in session and its refresh token).
  • Cookie consent record — RoadLux (first party, essential, retained 2 years).
  • App preference storage (appearance, biometric unlock, dismissed prompts) — RoadLux (first party, essential/functional, retained until cleared by the user).
  • Payment session and fraud-prevention storage — Stripe (third party, essential, set only during checkout and payment flows, duration set by Stripe).
  • Push notification registration — Apple Push Notification service and Firebase Cloud Messaging, where the customer enables notifications (third party, functional, retained until notifications are disabled).

RoadLux does not currently use analytics, advertising or profiling cookies. If any are introduced, they will be added to this inventory and will only be set with consent.