Legal
Cookie Policy
This Cookie Policy explains how opinionpick.com and the OpinionPick mobile app ("OpinionPick", "we", "us") use cookies and similar technologies when you visit our website or use our services. Please read it alongside our Privacy Policy.
01 What cookies & similar technologies are
Cookies are small text files placed on your device when you visit a website. They allow the site to recognise your device on subsequent visits, remember your preferences, and provide certain functionality. Similar technologies include local storage (data stored in your browser's local or session storage), pixel tags (tiny images that register page visits), and software development kit (SDK) identifiers used in mobile applications.
Cookies may be session cookies (deleted when you close your browser) or persistent cookies (which remain on your device for a set period or until you delete them). They may be set by us ("first-party") or by third-party services we use ("third-party").
02 How we use cookies & legal basis
We use cookies and similar technologies for the following purposes, each with an appropriate legal basis under UK GDPR and the Privacy and Electronic Communications Regulations 2003 (PECR):
- Strictly necessary / Essential — to operate the site securely, authenticate users, prevent fraud, and record your consent choices. Legal basis: legitimate interests (ensuring security and integrity of the service) and, for consent records, legal obligation under PECR. No consent is required to set strictly necessary cookies.
- Functional — to remember your preferences and settings for a more personalised experience. Legal basis: consent (Article 6(1)(a) UK GDPR / PECR Regulation 6).
- Analytics — to understand how visitors use the site so we can improve it. Legal basis: consent (Article 6(1)(a) UK GDPR / PECR Regulation 6). Analytics cookies are activated only after you grant consent; Google Consent Mode v2 is used to enforce this gate.
- Marketing — to measure the effectiveness of campaigns and, where consented, to serve relevant content about OpinionPick. Legal basis: explicit consent (Article 6(1)(a) UK GDPR). No marketing or advertising cookies are set unless you affirmatively opt in.
03 Cookie categories
The tables below list the specific cookies and similar technologies we use, grouped by category. Duration is approximate and may vary by browser.
Essential cookies (always active — no consent required)
These cookies are strictly necessary for the website to function. They cannot be disabled via our consent tool; however, you can block them in your browser settings, which may affect core functionality.
| Cookie | Provider | Purpose | Duration | Legal basis |
|---|---|---|---|---|
op_cookie_consent | OpinionPick | Stores your cookie consent choices so we do not need to ask again on every visit. | 12 months | Legitimate interests / legal obligation (PECR — consent record) |
cf_clearance | Cloudflare | Security challenge clearance issued by Cloudflare Turnstile bot-protection on our forms. Identifies browsers that have passed a challenge, reducing repeated challenges. | Up to 1 year | Legitimate interests (security & fraud prevention — strictly necessary) |
__cf_bm | Cloudflare | Bot-management cookie set by Cloudflare to distinguish between humans and automated traffic. | 30 minutes | Legitimate interests (security — strictly necessary) |
__cflb | Cloudflare | Load-balancing cookie set by Cloudflare to route traffic consistently to the correct server. | Session | Legitimate interests (service delivery — strictly necessary) |
Functional cookies (consent required)
These cookies remember your settings and preferences for a smoother experience. They are only set after you grant consent.
| Cookie | Provider | Purpose | Duration | Legal basis |
|---|---|---|---|---|
op_prefs | OpinionPick | Stores user-interface preferences (e.g. display settings) so they persist across sessions. | 6 months | Consent (Art. 6(1)(a) UK GDPR / PECR) |
Where no functional preferences have been saved, this cookie may not be set at all.
Analytics cookies (consent required)
These cookies help us understand how visitors use the site so we can improve it. They are loaded via Google Tag Manager and activated only after analytics consent is granted (Google Consent Mode v2). All data is aggregated and anonymised where possible.
| Cookie | Provider | Purpose | Duration | Legal basis |
|---|---|---|---|---|
_ga | Google (Google Analytics 4 via GTM) | Distinguishes unique visitors for Google Analytics 4 usage reporting. | Up to 2 years | Consent (Art. 6(1)(a) UK GDPR / PECR) |
_ga_<ID> | Google (Google Analytics 4 via GTM) | Persists session state and measurement data for GA4. | Up to 2 years | Consent (Art. 6(1)(a) UK GDPR / PECR) |
Google Analytics 4 is loaded via Google Tag Manager (GTM). If analytics consent is not granted, GTM operates in consent-denied mode and no analytics cookies are set. Google Analytics 4 does not log or store full IP addresses by default.
Marketing cookies (explicit consent required)
These cookies are used to measure campaign effectiveness and, where consented, to deliver relevant content about OpinionPick. No marketing or advertising cookies are set unless you actively opt in. When marketing consent is not granted, Google Consent Mode v2 ensures advertising features remain disabled.
| Cookie | Provider | Purpose | Duration | Legal basis |
|---|---|---|---|---|
_gcl_au | Google (via GTM) | Campaign conversion measurement for Google advertising products, activated only upon marketing consent. | Up to 3 months | Explicit consent (Art. 6(1)(a) UK GDPR / PECR) |
We do not currently engage in cross-site behavioural advertising. Marketing cookies are listed for completeness; if GTM campaign tags are not activated, no marketing cookies will be set.
04 Third-party services & international transfers
We use a small number of trusted third-party services that may set their own cookies or process data on our behalf. Each is subject to a data processing agreement with us.
- Google LLC — Google Tag Manager (tag management) and Google Analytics 4 (usage analytics). Google may transfer data to the United States; this is safeguarded by Standard Contractual Clauses (SCCs) adopted under UK GDPR and the UK–US data bridge (Data Privacy Framework adequacy). See Google Privacy Policy and Google Cookie Policy.
- Cloudflare, Inc. — Cloudflare Turnstile is used to protect our web forms against automated abuse. Cloudflare processes certain request metadata on servers that may be located outside the UK; this is safeguarded by SCCs and Cloudflare's EU–US and UK–US DPF certification. See Cloudflare Privacy Policy.
- Stripe, Inc. — Stripe processes service-fee payments within the OpinionPick app. Stripe may set cookies or use local storage for fraud-prevention and payment-flow management. Stripe is PCI DSS Level 1 certified. Data may be transferred to the United States, safeguarded by SCCs and Stripe's DPF participation. See Stripe Privacy Policy and Stripe Cookie Policy.
We do not sell personal data to third parties, and we do not allow third parties to use data collected via our cookies for their own advertising purposes.
05 Managing your cookies
You have several ways to control cookies:
Our consent tool
Use the button below to open our cookie preference centre and change your choices at any time. Your selection will be saved in the op_cookie_consent cookie for 12 months.
Browser settings
You can also control or delete cookies directly in your browser. Note that blocking essential cookies may prevent parts of the site from functioning correctly.
- Google Chrome: Settings → Privacy and security → Cookies and other site data
- Mozilla Firefox: Options → Privacy & Security → Cookies and Site Data
- Apple Safari: Preferences → Privacy → Manage Website Data
- Microsoft Edge: Settings → Cookies and site permissions → Cookies and site data
Further guidance is available at aboutcookies.org and ico.org.uk/for-the-public/online/cookies.
Do Not Track & Global Privacy Control
Some browsers transmit a "Do Not Track" (DNT) signal. There is currently no universally accepted standard for how websites must respond to DNT signals; we honour your in-app cookie choices via our preference centre rather than altering behaviour in response to DNT alone. We are working to support browser privacy signals such as Global Privacy Control (GPC); in the meantime you can set your preferences using the controls above.
06 Retention
The table below summarises how long each category of cookie persists. Cookies set by third parties are subject to those parties' own retention policies (see Section 04).
| Category | Typical duration | Deletion method |
|---|---|---|
| Essential (session) | Until browser is closed | Automatic on browser closure |
| Essential (persistent) | Up to 1 year (consent record: 12 months) | Automatic expiry or browser clear |
| Functional | Up to 6 months | Consent withdrawal via preference centre or browser clear |
| Analytics (GA4) | Up to 2 years | Consent withdrawal via preference centre or browser clear |
| Marketing | Up to 3 months (when set) | Consent withdrawal via preference centre or browser clear |
Withdrawing consent for a category causes the relevant cookies to be deleted or ignored on subsequent page loads; it does not retroactively affect data already collected prior to withdrawal.
07 Changes to this policy
We may update this Cookie Policy from time to time to reflect changes in technology, legislation, or our services. The "Last updated" date at the top of this page will indicate when the most recent revision was made. For material changes we will notify you via the site or, where appropriate, by email. Continued use of the site after an update constitutes your acknowledgement of the revised policy; where we require fresh consent, we will request it.
08 Contact & your rights
OpinionPick is operated from England & Wales (Suite RA01, 195-197 Wood Street, London, E17 3NU). If you have any questions about this Cookie Policy or wish to exercise your data-protection rights (including the right of access, rectification, erasure, restriction, portability, or to object to processing), please contact us:
- Email: [email protected]
- Subject line: "Cookie Policy Enquiry"
If you are not satisfied with our response, you have the right to lodge a complaint with the UK supervisory authority:
- Information Commissioner's Office (ICO)
ico.org.uk · 0303 123 1113
This policy and any disputes arising from it are governed by the laws of England & Wales.