Cookies & Tracking.

UK’s Privacy and Electronic Communications Regulations 2003 (“PECR”) require websites to tell visitors about cookies and to get consent for any that aren’t strictly necessary. This page is that statement for alderframe.co.uk. It was updated in August 2026 to reflect the new Schedule A1 to PECR, inserted by the Data (Use and Access) Act 2025 and in force since 5 February 2026.

The short version

alderframe.co.uk does not set any analytics, advertising, or cross-site tracking cookies. We do not use Google Analytics, Meta Pixel, TikTok Pixel, LinkedIn Insight, Hotjar, Mixpanel, or any equivalent. We do not run third-party advertising of any kind.

We do count visits, in aggregate, with Cloudflare Web Analytics. It sets no cookies and stores nothing on your device, and it doesn’t follow you from site to site. You can switch it off below, and it never loads if your browser sends a Global Privacy Control or Do Not Track signal.

The only cookies set on this domain are strictly-necessary cookies from our infrastructure provider Cloudflare, used to keep the site fast and secure. Under PECR these are exempt from consent because they are essential to deliver the service you have asked for (i.e. loading a webpage you typed in).

Cookies set on alderframe.co.uk

• __cf_bm — set by Cloudflare for bot management. Lifetime: 30 minutes. Strictly necessary; PECR-exempt.
• cf_clearance — set by Cloudflare after a CAPTCHA / bot challenge to remember that this browser passed. Lifetime: up to 1 year. Strictly necessary; PECR-exempt.
• __cflb (sometimes) — set by Cloudflare for session affinity to one of its edge nodes. Lifetime: session. Strictly necessary; PECR-exempt.

That’s it. No other cookies are set on alderframe.co.uk.

Local storage on alderframe.co.uk

The site stores nothing in your browser’s local storage, with one exception: if you switch statistics off below, a single entry (af-stats) remembers that choice on this device. It is never sent anywhere. Remembering a preference you set is exempt from consent under PECR Schedule A1.

Some pages show an app’s live App Store listing. Your browser fetches that directly from Apple; nothing is stored beyond your browser’s ordinary cache. The Privacy Policy explains what Apple receives.

What happens when you leave alderframe.co.uk

When you click a link that takes you to another site, that other site’s cookie policy applies. The most common are:

• Stripe Checkout (checkout.stripe.com, buy.stripe.com) — when you book a Build With Alderframe service. Stripe sets strictly-necessary cookies for payment processing and SCA. See stripe.com/cookies-policy.
• App Store — when you tap a Download on the App Store badge. See apple.com/legal/privacy.
• WhatsApp — when you tap a Chat on WhatsApp button. See whatsapp.com/legal/privacy-policy.
• Product Hunt, X, Instagram, TikTok, Facebook — when you tap social links on our pages. Each has its own published policy.

Visit statistics (Cloudflare Web Analytics)

We use Cloudflare Web Analytics to see, in aggregate, which pages people read and where they arrived from — for example, whether people who follow a link in one of our emails find what they came for. It tells us the page address, the page that referred you, your browser and device type, your country, and how quickly the page loaded. It does not identify you, and we never see individual visitors.

According to Cloudflare, it uses no cookies or local storage and does not fingerprint visitors by IP address, browser or anything else. Cloudflare processes it for us as our processor (see subprocessors). We use it only to improve this site, never for advertising, and we don’t share it with anyone. We rely on the statistical-purposes exemption in PECR Schedule A1 and on our legitimate interest in understanding how the site is used (UK GDPR Art. 6(1)(f)).

You can also object by blocking static.cloudflareinsights.com in your browser, or by emailing us.

Server logs

Cloudflare processes basic request logs (timestamp, IP address, URL, user agent, response code) for the purposes of security, fraud prevention, performance monitoring, and abuse detection. These logs are retained for a short period by Cloudflare and are not shared with Alderframe in personally identifiable form.

Doing not tracking

If your browser sends a Do Not Track or Global Privacy Control signal, the statistics script never loads. Nothing else on the site needs switching off.

Changes

If we ever add anything non-essential, this page will be updated and a clearly-visible cookie banner will appear seeking your consent before the new cookie is set. Until that day, no banner is shown because none is required.

What changed in 2026

The Data (Use and Access) Act 2025 inserted a new Schedule A1 into PECR, in force since 5 February 2026. It widens the list of things that can be stored on your device without consent — including security and fraud prevention, fault detection, remembering what you typed into a form, remembering display and accessibility preferences, and low-risk first-party statistics used only to improve the service and never shared with anyone else. Those last two categories still require a clear notice and a free, simple way to object; they are not consent-free.

Schedule A1 also makes explicit that “website” includes mobile apps, so the same rules apply to Freshli and RouteSky as to this site.

Two things follow for Alderframe. First, the cookies we do set were already exempt as strictly necessary, and remain so — we still show no cookie banner, because none is required. Second, the penalties changed: PECR fines are now aligned with UK GDPR levels, up to £17.5 million or 4% of global turnover, rather than the old £500,000 cap. We mention that not because it affects you, but because it is the reason we keep this page accurate rather than decorative.

We use first-party statistics under Schedule A1 paragraph 5 — Cloudflare Web Analytics, as described above, with a working opt-out on this page. We would not use Google Analytics for this — sharing your data with Google for Google’s own purposes fails the conditions of that exemption, so it would need full consent.

Contact

Questions about cookies: [email protected]. To report a concern to the UK Information Commissioner: ico.org.uk.

Solicitor-review note. This statement is published in good faith and reflects current UK PECR position as Alderframe LTD understands it on 24 September 2026. It is not legal advice.