Cookie policy
Last updated 18 October 2026
This policy explains the cookies and similar technologies Frameleaf uses, what each one does and how you can control them. It sits alongside our privacy policy.
What cookies and local storage are
A cookie is a small text file a website stores in your browser. Your browser sends it back on each visit, so the site can recognise you, for example to keep you signed in.
Local storage works in a similar way but stays in your browser and isn't sent to our servers with each request. We use it to remember simple settings on your device.
Some cookies last only until your session ends; others stay for a set time so the site remembers you between visits. First-party cookies are set by Frameleaf itself. Third-party cookies are set by another company's service, such as an embedded video player. In this policy, "cookies" covers all of these, plus local storage, unless we say otherwise.
Essential cookies and storage
These are needed for Frameleaf to work and to keep it secure. The law allows us to use them without asking for consent, and you can't switch them off in the cookie banner.
Cookies
| Name | Purpose | Duration |
|---|---|---|
| frameleaf_session | Keeps your session, so you stay signed in as you move between pages | 2 hours after your last activity |
| XSRF-TOKEN | Protects forms against cross-site request forgery | 2 hours after your last activity |
| remember_web_* | Keeps you signed in between visits. Only set if you tick "Remember me" when you sign in | 400 days, or until you sign out |
Local storage
| Name | Purpose | Duration |
|---|---|---|
| theme | Remembers whether you chose the dark or light theme | Until you clear it |
| rail | Remembers whether you collapsed the sidebar | Until you clear it |
| cookie_consent_set | Records that you've made a cookie choice, so we don't ask again | Until you clear it |
| ga_cookie_consent | Records whether you accepted or declined analytics | Until you clear it |
On the sign-up page, Cloudflare Turnstile runs a check to tell people from bots. It's part of keeping sign-up secure and is covered by Cloudflare's privacy policy.
Optional analytics cookies
These help us understand how Frameleaf is used, so we can fix problems and decide what to build next. They are only set if you choose to accept analytics in the cookie banner.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics 4 | Distinguishes one visitor from another | 2 years |
| _ga_* | Google Analytics 4 | Keeps track of your current visit | 2 years |
| ph_* (cookie and local storage) | PostHog | Product analytics: which pages and features are used. When you're signed in, linked to your account ID | Up to 1 year |
Google Analytics uses Google Consent Mode. Before you make a choice, or if you decline, Google receives only cookieless pings: no analytics cookies are set and no identifier is stored on your device.
PostHog requests go through our own domain, under the /ingest path, rather than straight to PostHog. PostHog doesn't load at all unless you accept analytics.
What analytics collect
If you accept analytics, Google Analytics and PostHog record information such as:
- the pages you visit and the site that sent you to us
- the buttons and links you select
- your device type, browser and screen size
- your approximate location, such as your country, worked out from your IP address
We use this to see which features people use, where they get stuck and what breaks, so we can fix problems and decide what to build next. We don't use it to build advertising profiles, and we don't share it with advertisers.
If you decline analytics, everything on Frameleaf still works exactly the same.
Embedded video players
Some videos on Frameleaf are embedded from YouTube or Vimeo. YouTube videos use YouTube's privacy-enhanced mode on the youtube-nocookie.com domain. These players may set their own cookies or similar technologies when you play an embedded video. Those are controlled by Google and Vimeo under their own cookie and privacy policies, not by us.
No advertising cookies
We don't run ads on Frameleaf and we don't use advertising or cross-site tracking cookies.
Changing your choice
- When you first visit, the cookie banner asks whether to accept analytics. Nothing optional is set until you choose.
- To change your mind later, clear this site's cookies and site data in your browser settings. The banner appears again on your next visit, and you can choose again.
- Through your browser, you can block or delete cookies for any site. If you block essential cookies, you won't be able to sign in.
Most browsers let you see and delete the cookies and site data for a single site, usually from the privacy or site settings, or from the padlock or site information icon next to the address bar. If you use a private or incognito window, your browser clears cookies and local storage when you close it, so you'll see the banner again next time.
Clearing site data also signs you out and resets the sidebar on that device. Preferences saved to your account, such as mature content, autoplay and theme, aren't affected once you sign back in.
The law
The Privacy and Electronic Communications Regulations (PECR) require us to ask for your consent before setting cookies or using local storage that isn't strictly necessary. Essential cookies and storage are exempt. Where cookies involve personal data, UK GDPR also applies, as explained in our privacy policy.
Changes to this policy
If we add, remove or change a cookie, we'll update this page and the date at the top. If a change needs your consent, we'll ask again through the cookie banner.
Contact
Questions about cookies? Email privacy@frameleaf.co.uk.