Cookie policy

What cookies are

Cookies are small text files a website stores in your browser. They let the site remember things between pages, such as the fact that you are signed in.

The cookies we use

All of these are set by our own website and are strictly necessary: each one is needed for something you ask for, such as signing in or choosing a currency. The law does not require your consent for strictly necessary cookies (regulation 6(4) of the Privacy and Electronic Communications Regulations), but we still want you to know about them.

simplecard-business-session

Keeps you signed in and remembers your designs and basket as you move between pages. It holds a random session identifier, and the session data itself is kept encrypted on our servers. It expires 2 hours after your last visit to a page, or when you sign out.

XSRF-TOKEN

Security. It protects forms against “cross-site request forgery”, where another website tries to send a form in your name. It expires after 2 hours.

sc_currency

Remembers the currency you chose for prices, such as euros. It is set only when you choose a currency at the top of the page or in the menu, holds only the currency's code and expires after a year. Until you choose, prices are shown in a currency suited to your browser's language, or in pounds, without a cookie.

remember_web_…

Keeps you signed in on that device until you sign out, for up to 400 days. It is set when you tick “Keep me signed in” on the sign-in page, and also when you continue from the editor with your name and email (your new account has no password yet, so without it you could lose your design when you close the browser), when you set your password from our email link and when you sign in with Google. Signing out removes it. On a shared or public computer, always sign out when you finish.

We do not use browser storage (such as local storage) to track you.

Advertising cookies, only with your consent

When you first visit, a banner asks whether we may use Meta's advertising cookie. Saying no is as easy as saying yes, and the site works exactly the same either way. Your answer is kept in a cookie of our own, sc_consent, for 180 days, so the banner does not keep asking.

If you say OK, we load the Meta pixel, a small script from Meta Platforms Ireland Limited (Facebook and Instagram). It sets the cookies _fbp and, after you arrive from one of our adverts, _fbc, which last up to three months. They let Meta tell us, in aggregate, which adverts led to a visit, a basket or an order. We also report the same events to Meta from our server (Meta calls this the Conversions API), with the value of an order, your IP address, your browser type and, if you order, your email address in hashed (scrambled) form so Meta can match the order to an advert. We never send your name, address, card details or the details on your cards. Meta uses this data under its own privacy policy; in the European Economic Area and the UK, Meta Platforms Ireland Limited is the controller for Meta's part.

If you say Essential only, none of this happens. You can change your mind at any time with the “Cookie choices” link at the bottom of every page, which brings the banner back. Withdrawing consent stops future tracking; to remove Meta's cookies already set, delete them in your browser.

Cookies on other companies' pages

When you pay, you move to the secure payment page of our payment provider, Stripe. If you choose to sign in with Google, you use Google's sign-in page. Those pages are on Stripe's and Google's own websites, which set their own cookies, for example to prevent fraud. Their cookie policies explain them. They do not set cookies on our website.

Links to our sister sites and other websites take you to sites with their own cookie policies.

Your choices

You can delete or block cookies in your browser settings. If you block the cookies above, you will not be able to sign in, save designs or order, because the website needs them to work.

If this changes

If we ever want to use other cookies that are not strictly necessary, such as analytics, we will ask for your consent first, in the same banner, and update this policy before we start.

Questions? Email dataprotection@simplecardbusiness.com.