Cookies policy

Last updated:

The short version

Cinema Priority sets cookies for one purpose: signing you in and keeping you signed in. There is one cookie for your session and two short-lived ones that appear only while you are signing in with Google or Discord. We set no advertising cookies, no analytics cookies and no tracking of any kind. This page explains each of them, what else we store in your browser and how the law applies. How we handle personal data more broadly is covered in our privacy policy.

What cookies are

A cookie is a small text file a website stores in your browser so it can recognise you between pages or visits. Cookies can be essential, such as one that keeps you signed in, or non-essential, such as those used for advertising and analytics. We only use the essential kind.

The cookies we set

  • Session cookie (better-auth.session_token): set when you sign in or create an account. It holds the token that keeps you signed in and is marked so that scripts on the page cannot read it. It lasts up to seven days from your last visit and is removed straight away when you sign out. On the live site the name carries the standard __Secure- prefix, which tells your browser to accept it over secure connections only.
  • Sign-in state cookie (better-auth.state): set only when you choose to continue with Google or Discord. It holds a random value we check when that provider sends you back to us, which is what stops someone else's sign-in being swapped for yours in transit. It lasts five minutes and is used once.
  • Sign-in window cookie (better-auth.oauth_popup): set at the same moment and for the same journey. It records which page opened the sign-in window so we can hand the result back to the right tab. It lasts ten minutes and is deleted as soon as you land back on the site.

If you never create an account or sign in, we set no cookies at all.

Other browser storage

When you dismiss the cookies notice at the bottom of the page, we record that choice in your browser's local storage rather than in a cookie. It contains nothing but a flag that the notice has been dismissed, it never leaves your device and it stays until you clear your browsing data.

What we deliberately avoid

We run no advertising or analytics trackers, so there are no cookies from ad networks or measurement tools on any of our pages. Fonts and other assets are served from our own domain rather than third-party networks, which means visiting the site does not expose your browsing to anyone else.

Third-party cookies

If you pay for a membership, payment happens on Stripe's checkout pages and Stripe may set its own cookies there under its own policy. If you sign in with Google or Discord, or join the members' Discord server, those companies set their own cookies on their own sites when you are on them, under their own policies. None of them sets cookies on our pages.

Why we do not ask for consent

Under the Privacy and Electronic Communications Regulations 2003, cookies that are strictly necessary for a service you have asked for do not require consent. Each cookie above exists only so you can sign in and stay signed in to the membership you signed up for, and the two sign-in cookies are set only once you have pressed a sign-in button, so all three fall within that exemption. That is why our banner is a simple notice rather than an accept or reject choice: there is nothing optional to accept or reject. If we ever introduce a non-essential cookie, we will ask for your consent before setting it and update this policy first.

Managing cookies

You can block or delete cookies through your browser settings at any time. If you delete or block our session cookie you will be signed out and will need to sign in again to use your membership. Guidance on controlling cookies in common browsers is available from the Information Commissioner's Office at ico.org.uk.

Changes and contact

If we change how we use cookies we will update this page and the date at the top before the change takes effect. Questions about this policy can be sent to hello@cinemapriority.co.uk. This policy is governed by the laws of England and Wales.