Cookie Policy

Cookies are small text files placed on your device when you visit a website. We use them to keep the site working, remember your preferences, understand how the site is used, and (where you allow it) measure and improve our content. Some cookies are "first-party" (set by us) and some are "third-party" (set by other providers whose services we use, e.g. for video, payments, or analytics).

We group the cookies on this site into four categories:
- Strictly necessary – required for the site to function. The site won't work properly without them.
- Functional – enable specific features such as video, fonts, payments, and social feeds.
- Analytics – help us understand how visitors use the site so we can improve it.
- Marketing – used to deliver and measure our newsletter sign-ups.
Note on our consent banner: Our site displays a cookie banner (CookieScript) that tells you about the cookies we use. It currently does not block non-essential cookies before they load. If you want to prevent analytics, marketing or certain functional cookies from being set, you should use your browser's cookie controls (see "Managing and disabling cookies" below).

These are set automatically and cannot be switched off in our systems.
- Laravel session cookie (laravel_session) – keeps you logged in and remembers items between pages. Deleted when you close your browser unless you stay logged in.
- CSRF token cookie (XSRF-TOKEN) – protects forms on the site (including log-in, contact and booking forms) against cross-site request forgery. Strictly necessary for security.
- user_role_set – a first-party cookie we set so the site can display the correct view for your account type (e.g. family vs. minder). Functional, but treated as strictly necessary because core flows depend on it.
- CookieScript consent cookie – remembers that you have seen our cookie banner so we don't show it again on every page.

- Google Analytics 4 (Google Ireland Limited) – property ID G-T7D33RPVVC. We use GA4 to understand which pages are popular, how long visitors spend on the site, and how people find us. Google may set cookies such as _ga and _ga_. Data is processed by Google under its standard analytics terms.
- Privacy details: https://policies.google.com/technologies/cookies
- Google Analytics opt-out: https://tools.google.com/dlpage/gaoptout

These enable specific features. The providers may set their own cookies or collect information about your device.
- Vimeo – we embed Vimeo videos on our homepage, flexible-content pages, and "Happy Families" testimonials page (player.vimeo.com). Vimeo may set cookies (including a vuid cookie) for playback and aggregated analytics. You can manage Vimeo cookies at https://vimeo.com/cookie_policy.
- Google Fonts – we load web fonts (Karla, Montserrat, Volkhov) from fonts.googleapis.com so the site displays correctly. Google may log IP addresses for this.
- LightWidget – our homepage Instagram feed is rendered by LightWidget (cdn.lightwidget.com), which may set a functional cookie.
- Google Forms – our Pod waiting-list page embeds a Google Form (docs.google.com) which sets Google cookies (e.g. NID, SAPISID) inside the iframe.

When you enter payment details (e.g. when updating your subscription or saved card), we use payment providers' scripts. Card details are captured securely by the provider and never touch our servers.
- Square – js.squareup.com/v2/paymentform is used on the family billing dashboard to securely capture card details. Square's privacy policy: https://squareup.com/legal/privacy.
- Stripe – js.stripe.com is used as part of our subscription billing (Laravel Cashier). Stripe sets fraud-prevention cookies such as __stripe_mid and __stripe_sid. Stripe's privacy policy: https://stripe.com/privacy.
Marketing cookies
- Flodesk – we use Flodesk for our email newsletter. Two newsletter sign-up forms are embedded on the site (homepage footer form and a pop-up form), and individual blog posts may include Flodesk embeds. Flodesk may set cookies via assets.flodesk.com to track form submissions and attribution. Flodesk's privacy policy: https://flodesk.com/policies/privacy.

- Bugsnag – our application reports errors to Bugsnag to help us fix problems. This is server-side and does not set browser cookies, but on an error it may transmit request data (such as IP address and, if you are logged in, your user reference) to Bugsnag. Bugsnag's privacy policy: https://docs.bugsnag.com/legal/privacy-policy/.
Other third-party resources

To display the site we also load common libraries from public CDNs (e.g. Bootstrap, jQuery, Font Awesome, DataTables, SweetAlert2). These are used to render the interface and are generally cookie-free, but your browser will contact those CDN domains.

Because our consent banner does not currently block cookies before they load, the most reliable way to control cookies is through your browser settings. You can block all cookies, allow only "trusted" sites to set them, or delete cookies that have already been set:
- Chrome: https://support.google.com/chrome/answer/95647;
- Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac;
- Firefox: https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop;
- Edge: https://support.microsoft.com/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09;
Be aware that disabling cookies (especially laravel_session and XSRF-TOKEN) will prevent you from logging in, completing forms, or booking.

We may update this policy as we add or remove third-party services. Any changes will be posted on this page with a revised date above.