1. Cookies, and what Floath actually uses instead
Most of what this page describes is not technically a cookie. Floath stores your preferences in your browser's local storage, which stays on your device and is never sent with a request to our servers. The distinction matters legally — counsel to confirm the wording — but it does not change your position much: it is still information kept on your device, so the same consent choice governs it.
One real cookie exists on this site: the sign-in session for the admin area. It is only ever set for staff who sign in at /admin, it is HttpOnly and SameSite=Lax, it is marked Secure in production, and it holds a signed username and an expiry. It is never set for a reader.
2. The three consent categories
The consent control on this site implements exactly three categories, and no others. There is no hidden fourth bucket, and no category that is on by default other than the strictly necessary one you cannot switch off.
| Category | Default | What it covers | Can you switch it off? |
|---|---|---|---|
| Necessary | Always on | Saved casinos, the comparison tray, your light or dark theme, and the record of this consent choice itself. | No — the site cannot remember any of this without it. Clearing your site data removes it all. |
| Analytics | Off | Aggregate page and click measurement, so we can see which comparisons and filters get used. | Yes, at any time. |
| Marketing | Off | Campaign attribution — connecting a visit to the campaign that brought it. | Yes, at any time. |
3. What is stored on your device
| Key | Category | What it holds | Lifetime |
|---|---|---|---|
| floath:consent | Necessary | Your analytics and marketing choices and the time you made them. | Until you clear site data. See the note in section 4. |
| floath:saved | Necessary | The casinos you have saved. | Until you clear site data. |
| floath:compare | Necessary | The casinos currently in your comparison tray. | Until you clear site data. |
| floath:theme | Necessary | Light or dark preference. | Until you clear site data. |
| Admin session cookie | Necessary (staff only) | A signed sign-in session for /admin. | Expires on its own; cleared on sign-out. |
None of the reader keys are transmitted to Floath. They are read by the page you are looking at and written back to the same browser. That has a trade-off worth stating: your saved casinos do not follow you to another device or another browser, and we cannot restore them if you clear your data, because we never had them.
4. How long your choice lasts
5. Changing or withdrawing consent
- Reopen the cookie preferences control from the site footer.
- Switch analytics or marketing on or off, then save. The change applies immediately — a category you switch off stops loading anything from that point.
- Alternatively, clear this site's data in your browser settings. That resets the consent record along with your saved casinos, comparison tray and theme, and you will be asked again on your next visit.
Withdrawing consent does not undo processing that already happened while consent was in place. Counsel to confirm that wording against each of [OPERATING JURISDICTIONS].
6. Third-party and operator sites
Floath sets no third-party cookies of its own. When you follow a link to an operator, that operator sets its own cookies under its own policy, and your Floath consent choice has no effect there — it cannot travel with you. The redirect sends a no-referrer header, so the operator does not receive the page you came from, but everything after that point is between you and them.
7. Browser controls and Do Not Track
Every major browser can block or clear site storage, and blocking it entirely will not break Floath — you will simply lose saved casinos, the comparison tray and your theme between visits, and be asked about consent again each time. Counsel to state Floath's position on Do Not Track and Global Privacy Control signals: the site does not currently read either, and if the position is to honour them, the consent hook needs to be changed rather than the policy reworded.
8. Changes to this policy
If a new category or a new third-party tag is ever added, the consent control changes with it and existing choices cannot be carried over to cover something a visitor was never asked about. Counsel to set the notice wording and to confirm when a change requires re-asking rather than merely updating this page.
9. Contact
Questions about what is stored, or a request relating to it, go to [DATA PROTECTION CONTACT] at [PRIVACY CONTACT EMAIL] on behalf of [REGISTERED COMPANY NAME]. The privacy policy covers rights, retention and the complaints route in full — including the parts of it that are, for now, deliberately left blank.