Cookies: Paytron

1. Why there is no cookie banner

Paytron sets nothing for advertising, nothing for analytics and nothing that follows you to another website. What it does store is what the product needs to do the thing you asked it to do: keep you signed in, and make a grantee link work on your phone and not on somebody else's.

Under the Privacy and Electronic Communications Regulations, storage that is strictly necessary for a service you asked for does not need your consent, which is why you are not asked to click a banner before reading a page. Everything we store is listed below, so you can check that claim rather than take it.

2. What Paytron stores on your device

paytron_device, a cookie. A random identifier, set the first time you open a grantee link, so that the link works on your device and stops working if it is forwarded to someone else. It is stored as a hash against the link, cannot be read by scripts, and lasts a year. Strictly necessary.
Your sign-in session, held in your browser's local storage rather than in a cookie. It keeps a donor or a member of staff signed in between visits, and is cleared when you sign out. Strictly necessary.
Small preferences, held in the same way: which foundation a member of staff is looking at, for example. They are conveniences, and clearing them costs you nothing but a click.

That is the complete list. No identifier here is shared with anyone, used to build a profile of you, or read on any website other than Paytron.

3. What other companies may store

A page that plays a video loads the player from Mux, which may store data on your device to run playback. A page that takes a payment hands you to Stripe or GoCardless, who set their own cookies on their own pages, under their own notices. Fonts are loaded from Google Fonts, which serves the font files and sets no cookie.

The public fund page a foundation embeds in its own website is the one Paytron page that can be framed. It stores nothing, whichever site it appears on.

4. Turning them off

Every browser lets you block or clear cookies and site data, usually under privacy settings. Blocking ours has consequences worth knowing about: a grantee link will not open, and signing in will not stick, because those are the two things the storage does.

Clearing the device cookie counts as arriving on a new device. Ask the foundation for a fresh link, and it will work.

5. Questions

Ask us at [DATA PROTECTION CONTACT]. The privacy notice covers the rest of what Paytron holds and the rights you have over it. This page is governed by the law of England and Wales.

6. Who we are

Paytron is operated by Zero Point One Ventures Ltd, a company registered in England and Wales under company number 17398629. Our registered office is Collingwood Buildings, 38 Collingwood Street, Newcastle Upon Tyne, NE1 1JF. In these pages, "we", "us" and "our" mean Zero Point One Ventures Ltd.

Paytron is sold to UK community foundations. A foundation using it is our customer; its donors, its grantees and its staff are the people who use the product day to day. Where a document says something different applies to each of them, it says so.