Cookie Notice

1. What this notice covers

A cookie is a small piece of text a website asks your browser to keep and send back on the next request. The same rules cover other ways of keeping or reading things on your device, such as local storage and session storage. This notice uses the word "cookie" loosely to mean all of them, and names each one exactly.

This notice covers btrtrades.uk. It does not cover Stripe's checkout pages, the Discord app, or your broker's platform. Those are other companies' services with their own notices - see section 7.

How we use personal data more generally is set out in the privacy notice.

2. Your choice about analytics

The only optional thing on this site is a page-view counter. Everything else is needed to make the site work.

• On your first visit a small panel explains the counter and offers two equally weighted buttons: keep it on, or turn it off. Neither is styled as the answer we would prefer.
• If you close the panel without choosing, nothing is recorded, and the panel comes back next time you visit.
• A Cookie settings button sits in the footer of every page. It is there permanently, so changing your mind is one click and costs nothing.
• If you turn analytics off after a page has already loaded it, the change takes effect from the next page you open. There is no way to unload a script that has already run, and we would rather say so than pretend otherwise.
• Turning it off has no effect on anything else. Nothing on the site is withheld, slowed or degraded because you said no.

3. The full list

3.1 btr_series_key - signing you in to the library

You only receive this cookie after you enter a valid BTR access key on the access page. If you have not bought a streamed series, you will never receive it.

• Type: first-party cookie, set by btrtrades.uk on our own server. No other company can read it.
• What it holds: the BTR access key you typed in, or the one that arrived in your order email.
• What it is for: it is how the site knows which paid series you are entitled to, so the library page and the episode player will open for you. Without it, every gated page refuses.
• How long it lasts: up to 400 days, which is the longest period browsers will honour. If you enter a key we do not recognise, or a key whose access has been suspended or withdrawn, the cookie is deleted immediately instead.
• Protections: marked HttpOnly, so no page script can read it; Secure, so it is only ever sent over HTTPS; and SameSite=Lax, so it is not sent when another website makes a background request to ours.
• Strictly necessary? Yes. It exists only to deliver content you asked for and paid for. It is not used for analytics, advertising, profiling or measurement of any kind.
• Turning it off: not offered, because the library cannot be delivered without it. Clearing cookies for btrtrades.uk removes it; you then just enter your key again.

3.2 btr.storage-choice.v1 - remembering your analytics choice

• Type: an entry in your browser's local storage, held only by btrtrades.uk. If local storage is unavailable - some private-browsing modes block it - we fall back to a first-party cookie called btr_storage_choice holding exactly the same record.
• What it holds: whether you said yes or no, that the choice was about Cloudflare Web Analytics, the date and time you decided, whether you decided from the banner or the footer, and the version of this notice you were shown.
• What it is for: so we do not ask you again, and so your decision is actually honoured.
• How long it lasts: a decision to keep analytics on lapses after about six months and you are asked again. A decision to turn analytics off does not lapse - it would not be much of an objection if it quietly expired. Where the cookie fallback is used, it is refreshed each time it is read.
• Protections: the fallback cookie is SameSite=Lax and, on the live site, Secure.
• Strictly necessary? Yes. A record kept solely to remember a privacy choice is treated as essential; the alternative is asking you the same question on every page.
• Turning it off: clearing site data for btrtrades.uk removes it, and the panel will appear again on your next visit.

3.3 btr.storage-notice.deferred.v1 - you closed the panel without answering

• Type: an entry in your browser's session storage.
• What it holds: the single fact that you closed the panel without making a choice.
• What it is for: so the panel does not reappear on every page for the rest of that browsing session.
• How long it lasts: until you close the tab. It is not written to disk and it does not survive the session.
• Strictly necessary? Yes, on the same basis as 3.2.

3.4 Cloudflare Web Analytics - the optional one

If you have not turned it off, each page loads a small script from static.cloudflareinsights.com. This is Cloudflare Web Analytics. It counts page views and page-load timings so we can see which pages people actually use and whether the site is slow. It is the only optional thing here, and section 2 explains how to switch it off.

What Cloudflare says about it. Cloudflare's own published description of the product, checked on 7 September 2026 at cloudflare.com/web-analytics, states: "Cloudflare Web Analytics does not use any client-side state, such as cookies or localStorage, to collect usage metrics." Cloudflare also states: "We also don't 'fingerprint' individuals via their IP address, User Agent string, or any other data for the purpose of displaying analytics."

What that means, and what we have not verified. On Cloudflare's description, this script stores nothing on your device and builds no profile of you. We are relying on Cloudflare's statement. The script is written and served by Cloudflare, so we cannot inspect from our side exactly what it reads from your browser, and we do not claim to have tested it. That is precisely why we offer the off switch rather than deciding for you.

What definitely does happen when it loads. Loading any file from another company's server tells that company your IP address and your browser's user-agent string, because that is how the request reaches them. Cloudflare therefore receives those. That is covered in the privacy notice.

3.5 The phone desk at btrtrades.uk/app

Only on a phone you use for the BTR Bot phone desk. If you never open btrtrades.uk/app, none of this is stored. What the phone desk sends and what we keep about it is in the privacy notice, section 3.10.

• btr_phone_token: an entry in the phone's local storage, held only by btrtrades.uk. It holds the token we issue when you pair the phone with your bot, which is how our site knows the phone is yours and which bot to show it. It is written when you pair and removed when you disconnect the phone. If you disconnect the phone from the desk instead, it is removed the next time you open the phone desk on that phone.
• btr_phone_hint: an entry in the same local storage, written and removed together with the token. It holds your licence key with all but its last four characters hidden (BTR-••••-••••-1234), so the phone desk can show which licence it is connected to.
• btr_phone_alerts_seen: an entry in the same local storage. It holds the time of the newest alert you have opened in the phone desk's Alerts tab, so the badge on that tab counts only the alerts you have not seen yet. It holds no figures, and it is removed together with the token.
• btr_phone_display: an entry in the same local storage, written only when you change a setting in the phone desk's Settings (showing or hiding figures and the colour theme). It holds those choices for that phone and no figures, and it is removed when you clear site data for btrtrades.uk on that phone.
• btr_notes_seen: an entry in the same local storage. It holds the newest bot version and app update whose What's new notes this phone has shown, so each is shown once. It holds no figures.
• btr_notes: an entry in the same local storage. It holds a copy of the published What's new notes, so they open without a signal. It holds no figures.
• btr-phone-desk-v1: when you open btrtrades.uk/app, your browser installs the phone desk's service worker, which keeps a copy of the app's own files (its page, style sheet, script, icons and manifest) in a cache of that name, so the phone desk opens quickly on a poor signal. It never stores your figures: everything the phone desk shows is fetched live. A newer version of the app replaces the copy.
• Notifications: only if you turn them on in the phone desk, your phone's browser keeps a push subscription for btrtrades.uk, so that the notifications you asked for can reach that phone. Turning notifications off removes it.
• Strictly necessary? Yes. Each one exists only to give you the phone desk you asked for. None is used for analytics, advertising or profiling.
• Turning it off: disconnect the phone, or clear site data for btrtrades.uk on that phone. The phone desk then asks you to connect it again.

4. What this site does not do

• No advertising or marketing cookies. We do not run ads and we do not sell ad space.
• No cross-site tracking, no social media pixels and no remarketing tags.
• No profiling, no scoring and no automated decisions about you.
• No selling or sharing of anything measured here with anyone.

5. Cloudflare's own security cookies

This site is hosted on Cloudflare and served through Cloudflare's network. Cloudflare documents a set of cookies it may set itself for security and traffic management, and describes all of them as strictly necessary. The ones most likely to appear are:

• __cf_bm - bot management; separates automated traffic from people. Expires after about 30 minutes of inactivity.
• cf_clearance - records that a security challenge was passed, so you are not challenged again.
• _cfuvid - lets Cloudflare's firewall tell apart different users who share one IP address.
• __cflb - load balancing, where it is in use.

When this site was checked on 7 September 2026, none of these was being set on the public pages. Whether any of them appears depends on which Cloudflare security features are switched on, and that can change without any change to our own code.

6. Your IP address and the waitlist form

This is not device storage, but it belongs here because people reasonably ask. When you submit the waitlist form, our server reads the IP address the request came from and keeps a count of submissions against it for 60 seconds, so that automated scripts cannot flood the form. The count is held in Cloudflare's edge cache and expires by itself. Your IP address is not written to our database and is not stored alongside your signup.

7. Other companies' websites

• Stripe. Payment is taken on Stripe's own checkout pages. The moment you leave btrtrades.uk for Stripe, Stripe's cookies and Stripe's privacy notice apply, not ours. We do not control them and we do not receive them.
• Discord. The community and the support tickets live on Discord. Discord's cookies and privacy notice apply there.
• Instagram. The link in our menu takes you to Instagram, which is Meta's service, with Meta's cookies. There is no Instagram code embedded in this site.
• Our emails. Our order, licence and access emails are sent through Resend. Our code does not ask for open tracking or click tracking, and our emails contain no tracking pixel.

8. Controlling all of this yourself

Use the Cookie settings button in the footer to change your analytics choice at any time. Beyond that, every browser lets you see what a site has stored, delete it and block it - look for "Cookies and site data" in your browser's privacy settings. Blocking storage for btrtrades.uk will stop the paid library from opening, because the item in section 3.1 is what holds your access, and it will make the analytics panel reappear on every visit because there is nowhere to record your answer. On a phone you use for the phone desk, it also disconnects the phone desk (section 3.5). Nothing else on the site depends on it.

9. Changes, and how to reach us

If we change what this site stores, we will change this page, raise the version number at the top, and ask you again for any choice that is affected. If you have a question about anything here, email [email protected].

Related: the privacy notice, the terms and conditions and the risk disclaimer.