Cookie and Similar Technologies Notice
Last updated: 4 August 2026
This notice explains how My Pocket Marketer Ltd uses cookies and similar technologies on the MyPocketMarketer website and application (the Service).
My Pocket Marketer Ltd is registered in England and Wales under company number 17312916. Its registered office is at 2 Claridge Court, Lower Kings Road, Berkhamsted, England, HP4 2AF (we, us or our).
Cookies are small text files stored on your device. Similar technologies include local storage, scripts and device signals. Some are essential for the Service to work. Others would require consent or a simple way to object, depending on their purpose.
Technologies we currently use
| Technology | Provider | Purpose | Typical duration | Status |
|---|---|---|---|---|
__Secure-authjs.session-token |
Us, through Auth.js | Keeps you securely signed in and associates requests with your account. Set only once you sign in | Up to 30 days, or until you sign out earlier | Strictly necessary |
__Host-authjs.csrf-token |
Us, through Auth.js | Prevents request forgery on the sign-in form | Until you close your browser | Strictly necessary |
__Secure-authjs.callback-url |
Us, through Auth.js | Returns you to the correct page after signing in | Until you close your browser | Strictly necessary |
reCAPTCHA cookies and device signals, which may include _GRECAPTCHA and other identifiers set by Google |
Helps prevent bots, fraud and abuse when the free snapshot form is submitted. The form loads reCAPTCHA from www.google.com and www.gstatic.com; anything Google stores is set on Google's own domains, not ours, so we can neither read nor list it precisely |
Session-only or up to 6 months, depending on the identifier set by Google | Strictly necessary security measure | |
| Vercel Web Analytics | Vercel | Counts page visits, popular pages and referring sites in aggregate, so we can understand how the Service is used | Does not set a cookie and does not identify you individually — nothing is stored on your device | Privacy-preserving aggregate analytics, relied on under the UK statistical-purposes exception (see below) |
The names above are those used over a secure connection, which is how the
Service runs in production. The __Secure- and __Host- prefixes are a
browser-enforced protection: they instruct your browser to reject the cookie
unless it was set securely.
We sign you in with an email address and password rather than through Google, Facebook or a similar provider, so the additional cookies Auth.js can use for those sign-in methods — covering OAuth state, nonce, PKCE and security keys — are never set on this Service.
Every cookie above is HttpOnly, meaning it cannot be read by scripts
running in the page, and SameSite=Lax, meaning it is not sent when another
website links to us.
We use Google reCAPTCHA only for security and abuse prevention. It may process your IP address, browser information and device signals. Google may set or read cookies when the reCAPTCHA service is loaded. You can read Google's Privacy Policy and Google's Terms of Service.
Blocking a strictly necessary technology may prevent you from signing in or submitting the free snapshot form.
Vercel Web Analytics
We use Vercel Web Analytics to understand how many people visit the Service and which pages they find useful. It counts visits and page views in aggregate; it does not use cookies, does not build a profile of you as an individual, and does not track you across other websites.
Because this is aggregate, non-identifying analytics, we rely on the UK's statistical-purposes exception rather than asking for consent. If we later introduce analytics that does identify or track individuals, this notice will be updated first and consent will be requested where the law requires it.
A simple and free way to object: if your browser sends a "Do Not Track" signal (a setting available in most browsers' privacy settings), the Service will not load Vercel Web Analytics for you at all — no action needed beyond turning that setting on in your own browser.
Technologies we do not currently use
We do not currently use:
- advertising, retargeting or cross-site tracking technologies;
- social-media tracking pixels; or
- analytics cookies or analytics technologies that identify or track individual visitors.
We will not introduce advertising or other non-exempt tracking technologies unless we first provide clear information and obtain any consent required by law.
Managing technologies on your device
You can use your browser settings to view, block or delete cookies. Browser controls vary, so use your browser's help pages for instructions. Deleting the authentication session cookie will sign you out.
Where the Service displays a consent or objection control, you can also use that control to change your choice at any time.
Changes to this notice
We will update this notice before introducing a materially different use of cookies or similar technologies. We will change the date above and, where appropriate, give registered users direct notice.
Contact us
Questions about this notice can be sent to emily@mypocketmarketer.com.