Legal

Cookie Policy

Last updated: 29 September 2026

Cookies are small text files stored on your device. Websites can also keep small amounts of information in your browser's local storage. We use both to make the site work, keep you logged in and remember your settings. We don't use analytics or advertising cookies. This policy sits alongside our Privacy Policy.

Cookies we set

  • Sign-in (strictly necessary). Our account provider, Supabase, sets cookies whose names start with "sb-" to keep you signed in and your account secure. Login, entering competitions and checkout don't work without them, so they don't need consent.
  • Campaign source (pb_src). If you arrive through one of our campaign links (for example from our TikTok, Instagram or emails) while not signed in, this cookie remembers the campaign label, such as "tiktok", for 30 days. If you sign up, we save that label to your account so we know which channels bring people to the site. It holds nothing else and isn't shared with anyone.

Payments

Card payments are taken on the secure payment page of our payment provider, Cashflows. Cashflows may set its own cookies on that page to process your payment and help prevent fraud. Those cookies are covered by Cashflows' own policies.

Reviews

Our pages load a script from Trustpilot so that, after an entry, Trustpilot can invite you to review us. Trustpilot may set its own cookies or similar storage when its script runs, covered by Trustpilot's own policies.

Settings stored in your browser

These stay on your device and are only used to make the site work the way you left it. They are strictly necessary or functional, so they don't need consent.

  • pb-look: the look you chose (Modern or 8-bit).
  • pb-game-v1: your sound and CRT screen effect settings, and whether you've found the site's hidden secret.
  • pr_muted: whether pack-opening sounds are muted.
  • pb_comp_basket: the competitions and tickets in your basket, until you check out.
  • pb_basket: your shop basket, when the shop is open.
  • pb_welcome_dismissed: that you've closed the welcome offer, so we don't show it again.
  • pb_quest_sync_at: when the Quests page last checked your quest progress, so it checks at most every 10 minutes.
  • pb_review_asked: in our iPhone app, that we've already asked you to rate the app.
  • pb_push_pending: in our iPhone app, if you allow notifications before signing in, your phone's notification token is kept here until you sign in, then removed.
  • pb_splash_shown and pb-chunk-reloaded (cleared when you close the tab or app): the app's opening screen has been shown, and the page has already reloaded itself once after a site update.
  • pb-admin-look and admin_stream_privacy (our staff only): display settings for our back office.

Managing cookies

Because we don't use analytics or advertising cookies, we don't show a cookie banner. If we ever add them, we will ask for your consent first. You can block or delete cookies and browser storage in your browser settings. If you do, you will be signed out, login and checkout won't work until you allow the sign-in cookies again, and your look, sound and basket settings will reset.

Contact

Questions about cookies? Email privacy@packbutchercomps.co.uk.