1. About this policy
This policy explains how OX9.APP (operated by SCOTT&YOUNG LTD, trading as OX9.APP) uses cookies and similar technologies such as browser local storage, and how you can control them. Read it alongside our Privacy Policy and Data Policy.
Contact for questions: beetge31@gmail.com.
2. What cookies and similar technologies are
Cookies are small text files placed on your device when you visit a website. "Similar technologies" include local storage and session storage, which a progressive web app (PWA) like OX9 uses to remember information on your device. In this policy we refer to all of these as "cookies".
- First-party cookies are set by OX9.
- Third-party cookies are set by another organisation whose service we use.
- Session cookies last until you close your browser; persistent cookies last for a set period.
3. The categories we use
a. Strictly necessary (always on). These are required for the Service to work and cannot be switched off in our systems. They include:
- Authentication/session — keeping you signed in after magic-link sign-in (provided via Supabase authentication).
- Security — protecting against misuse and keeping your session safe.
- PWA function — local/session storage needed to load and run the app and remember essential app state.
We rely on these being strictly necessary, so they do not require consent under PECR.
b. Functional (optional). Remember choices you make to improve your experience, such as preferences and saved settings. Set only where used.
c. Analytics (optional, consent-based). We run our own in-house analytics to understand how the Service is used (for example counting listing views). These use a hashed, pseudonymised reference rather than identifying you by name, and we do not use them to build advertising profiles. Because they are not strictly necessary, we treat analytics storage as requiring your consent.
d. Advertising / third-party tracking. We do not currently use advertising or cross-site tracking cookies. If this changes (for example if we introduce a third-party analytics or error-monitoring tool e.g. PostHog, Sentry — not in use at v1.0), we will update this policy and only set such cookies after you consent.
4. Cookie table
| Cookie / storage | Type | Category | Purpose | Duration |
|---|---|---|---|---|
| Supabase auth token/session | First-party (local/session storage) | Strictly necessary | Keep you signed in after magic-link sign-in | Session / until sign-out or expiry |
| Security/session integrity | First-party | Strictly necessary | Protect your session | Session |
| PWA app state | First-party (local storage) | Strictly necessary | Load and run the app | Persistent (device) |
| Preference storage | First-party | Functional | Remember your choices/settings | Persistent confirm duration |
| In-house analytics reference | First-party | Analytics (consent) | Measure usage via a hashed reference | Persistent confirm duration |
| Future third-party analytics/monitoring | Third-party | Analytics (consent) | Not in use at v1.0 | TBD |
Note: displaying maps loads tiles from OpenStreetMap; this causes your browser to request images from the map provider but is not used by us to set tracking cookies.
5. Your choices and how to manage cookies
- Consent banner. When you first use the Service (and whenever you ask), you can accept or reject non-essential (functional and analytics) cookies. Strictly necessary cookies are always active because the Service cannot run without them. Banner to be implemented before launch.
- Change your mind. You can withdraw or change your consent at any time via the cookie settings link/control to be added or by contacting beetge31@gmail.com.
- Browser controls. You can block or delete cookies and clear local storage through your browser settings. Blocking strictly necessary cookies/storage may stop parts of the Service (such as staying signed in) from working.
6. Changes to this policy
We may update this policy as our use of cookies changes. We will post the updated version with a new effective date.
7. Contact
Questions about cookies: beetge31@gmail.com.
SCOTT&YOUNG LTD trading as OX9.APP · Company Registration No. 16697821 · Registered in England and Wales · Registered office: 29 Grenville Way, Thame, OX9 3YN.