Cookies
The short version: the only things stored before you choose are the ones that make the site work. Analytics waits for a yes, and takes no for an answer.
Last updated 2 September 2026.
How we handle this
Most sites drop their analytics cookies as the page loads and ask afterwards. We do not, and we have checked that we do not: until you accept, analytics keeps nothing on your device and sends nothing anywhere.
If you ignore the banner, that counts as no. If you decline, that is the end of it — we do not ask again on every page.
Essential — always on
These do not need consent under the rules, because without them the site cannot do what you have asked it to.
- Consent record (CookieYes). Remembers what you chose, so we can honour it and prove we asked. Set when you interact with the banner.
- Sign-in session (Supabase). Only if you sign in. Keeps you signed in between pages. Cleared when you sign out.
Rate limiting also briefly holds a value derived from your IP address, but that sits on our side rather than on your device, so it is not a cookie.
Analytics — only if you say yes
We use PostHog, on its European servers, to understand which films people actually read about and whether the site is any use. If you accept, it stores a random identifier on your device so it can tell one visit from two.
It records pages viewed and a small number of events — for instance, that somebody joined the mailing list from the watchlist page. It is never sent your email address, and we do not use it to build a profile or to advertise to you.
Decline, and none of that identifier is written and no request is made. That is a deliberate configuration choice, not a default.
If you accept, we may also record a replay of your visit — the pages you moved between and what you clicked — kept for 30 days and then deleted. It is how we find the bits of the site that do not work.
Anything you type is blanked before it leaves your browser. The masking happens on your device, not on our side, so form fields never reach us at all. Decline analytics and no recording happens in the first place.
What we do not use
No advertising cookies. No social media pixels. No cross-site tracking. No fingerprinting. There is no ad network on this site and no plan to add one.
Shops we link to set their own cookies once you are on their site. We have no control over those — their policy applies, not ours.
Changing your mind
Use the cookie settings link in the banner to change your choice at any time. Withdrawing consent stops analytics immediately.
You can also clear cookies in your browser, or block them entirely. Blocking the essential ones will sign you out and make the banner ask again; the rest of the site will work fine.
More detail
The privacy notice covers what we do with the data itself, who processes it and how to get it deleted. Anything not answered in either, email darren@digitopiadesign.com.