Cookie policy

1. Our approach

This site keeps things minimal. We don’t use advertising or tracking cookies, and we don’t use what we store to follow you around the web.

Our visitor statistics run on Plausible, a privacy-first service that uses no cookies and collects no personal data, so no consent banner is needed for it.

2. What we store in your browser

Intro animation

sessionStorage, key 12t-visited: remembers that our intro animation has already played this visit, so it does not replay on every page. Cleared when you close the tab.

Signing in

If you sign in to My bookings, the email address you entered is kept in your browser (localStorage, key 12t-signin-email) until you open the sign-in link. Google Firebase then keeps a sign-in token so you stay signed in on that device, until you sign out. Members of our team who sign in to the staff dashboard get the same.

Bot protection

Google reCAPTCHA, through Firebase App Check, checks that requests to our booking system and forms come from a real visitor rather than an automated script. It may set a Google security cookie (such as _GRECAPTCHA) and keeps a short-lived verification token in your browser. It is used only to protect the site from abuse.

Website security

Cloudflare, which hosts our website, may set a security cookie (__cf_bm) to tell real visitors from automated bots. It does not identify you, is not used to track you, and expires after 30 minutes without activity.

Booking fallback

localStorage, keys beginning 12t-: if our booking database is temporarily unreachable, your booking details are held in your own browser so nothing is lost.

3. Services that load on our pages

• Our website itself, served and protected by Cloudflare.
• Fonts, from Fontshare and Google Fonts.
• Visitor statistics, processed by Plausible (EU servers, no personal data).
• Our booking system and forms, which talk to Google Firebase and are protected by Google reCAPTCHA.
• When the booking opens, a small code library for your boarding pass’s QR code, from Cloudflare (cdnjs).
• If you play a film on our About page, it loads from YouTube in its privacy-enhanced mode or from Vimeo with tracking switched off, and only once you press play.

These requests share your IP address with those providers as a technical necessity, but we do not use them to track you.

4. Managing what is stored

You can clear or block locally stored data at any time in your browser settings (usually under Privacy, “Clear browsing data” or “Site data”). Blocking storage does not stop you browsing the site: the intro animation may simply replay, you may need to sign in again and, in rare cases, a booking may need to be re-entered.

5. Changes to this policy

If we ever add other cookies, including any for advertising, we will update this page and our privacy policy first, along with the date at the top.

6. Contact

12 Tribes Studios & Productions Ltd
152–154 Curtain Road, Shoreditch, London EC2A 3AT
hello@12tribesstudios.com