DRAFT – not legally reviewed
TODO(Jack): this text is a working draft. Replace it with your reviewed copy, or have it reviewed by a solicitor, before the site goes live. Items marked TODO need your decision.
Cookie notice
Last updated: 14 October 2026
Cookies are small files a website stores on your device. Similar technologies, such as local storage, work in the same way. This notice explains which ones we use.
We only use cookies that are strictly necessary to keep the website secure and to keep you signed in. The law allows these without your consent, so we don’t show a cookie banner. We don’t use analytics, advertising or tracking cookies of any kind.
Cookies we set
| Name | Purpose | How long it lasts |
|---|---|---|
sb-…-auth-token (may be split into parts ending .0, .1) | Keeps you securely signed in to your account. It can’t be read by scripts on the page. Only set when you sign in. | Until you sign out, or up to 400 days if you don’t |
If you just browse the website without signing in, we don’t set any cookies.
Cookies set by our providers
| Provider | Purpose |
|---|---|
| Cloudflare (website security) | Cloudflare protects the website from attacks and automated traffic. It may set a short-lived security cookie, such as __cf_bm (30 minutes), to tell people apart from bots. |
| Cloudflare Turnstile (sign-in page) | A check that stops automated sign-up attempts. It may store information on your device that it needs to run the check. It isn’t used for advertising or tracking. See Cloudflare’s Turnstile privacy addendum. |
| Stripe (Direct Debit setup) | When you set up your Direct Debit you go to a page run by Stripe, which sets its own cookies for security and fraud prevention. See Stripe’s cookie policy. |
Managing cookies
You can block or delete cookies in your browser settings. If you block the sign-in cookie, you won’t be able to sign in to your account.
Changes
If we ever want to use cookies that aren’t strictly necessary, we’ll ask for your consent first and update this notice.
Questions
Email us at contact@wisereturn.co.uk. Our privacy notice explains how we use personal data more generally.