Cookie Policy

This policy covers cookies and similar technologies on donorpulse.uk and, where relevant, the DonorPulse product apps. It should be read with our Privacy Policy.

UK GDPR and PECR require consent before we set non-essential cookies (analytics). Essential cookies can be set without a prompt because the site cannot remember your choice or keep you signed in without them.

What are cookies?

Cookies are small text files stored on your device. We also treat localStorage entries used for the same purpose as cookies.

Cookies we use

Essential

• dp_cookie_consent — stores Accept or Reject so we do not ask every visit. Set when you use the banner. Lasts 1 year. Also written to localStorage under the same name.
• Auth.js session cookies — keep charity staff signed in across auth, CRM, and builder. Essential to the product, not used for marketing analytics.
• Donation basket / donor session cookies on hosted donation sites — required to complete a checkout. Those sites are operated for the charity; this marketing-site banner does not control them.

Analytics (only after you Accept)

• Google Analytics 4 (_ga, _ga_*) — marketing-site usage (homepage → pricing → signup). Google is the processor. These cookies are not loaded until you accept.
• PostHog — product usage in the CRM and website builder (activation and feature events). Configured for EU data residency. Not initialised until you accept.

GA4 loads on this marketing site and PostHog initialises in the CRM and builder only after you accept. Rejecting (or ignoring the banner) keeps them off.

Payments (Stripe)

Stripe may set cookies when you complete Checkout or the Customer Portal. Those are required to take payment securely and are governed by Stripe's privacy policy.

How we ask

A first-time visitor sees a consent banner before any analytics script is injected. Choose Accept to allow GA4 and PostHog, or Reject to keep only essential cookies. We default to denied — no analytics storage until you accept.

Change your mind: open cookie settings.

Processors named here

• Google (GA4; also Google sign-in, which is not an analytics cookie)
• PostHog (product analytics)
• Stripe (payments)
• Resend (email — not cookies, listed for completeness with the Privacy Policy)

Browser controls

You can also block cookies in your browser. Blocking essential cookies will stop sign-in and may reset this consent choice.