Legal
Cookie Policy
Effective date: 24 August 2026
1. What are cookies?
Cookies are small text files placed on your device by a website you visit. They allow the website to remember information about your visit — for example, that you are logged in, or that you have previously made a cookie preference choice.
Similar technologies such as local storage, session storage, and pixel tags can perform comparable functions and are covered by this policy where applicable.
2. How we use cookies
Easy Everyday Baking uses a very small number of cookies. We do not currently use cookies for analytics or advertising. The cookies set on this site fall into two categories: strictly necessary cookies required to operate the admin area and to protect the site against automated abuse, and YouTube — a non-essential third-party service that requires your active consent before it loads.
3. Cookie categories
Strictly necessary
These cookies and technologies are required for the website to function securely. They cannot be switched off because disabling them would break core security or anti-abuse mechanisms. Under EU, UK, and comparable data-protection law, strictly necessary cookies do not require prior consent.
As a public visitor (not an admin), no session or authentication cookies are set on your device. The Supabase auth cookie below is set only for the one administrator account.
| Name / Pattern | Provider | Purpose | Duration |
|---|---|---|---|
| sb-*-auth-token | Supabase | Admin session authentication. Set only when the admin logs into the private content editor (/admin). Not set for public visitors. | Session / 7 days |
| cf-* / __cf_bm / _cfuvid | Cloudflare Turnstile | Anti-bot and anti-abuse verification on the contact form (/contact only). Turnstile is a security service — it distinguishes humans from automated bots to protect the contact endpoint from spam and abuse. It does not track you across websites or build advertising profiles. Set only when /contact is loaded. | Session |
Why Turnstile is strictly necessary
Cloudflare Turnstile is used exclusively as a security measure to prevent automated abuse of the contact form. It does not serve advertising, does not track you for analytics, and does not profile you across websites. Its sole function is anti-abuse verification — the same security category as a CAPTCHA. Under recital 25 of the ePrivacy Directive and UK ICO guidance, security technologies that are essential to protect a service from misuse do not require prior consent.
Non-essential: YouTube video embeds (requires your action to load)
Some recipe pages include embedded videos from YouTube. Loading a YouTube embed — even using privacy-enhanced mode (youtube-nocookie.com) — connects your browser to Google's servers. This shares your IP address with Google and allows Google to set cookies. youtube-nocookie.com is not equivalent to consent.
For this reason, YouTube embeds are not loaded automatically. On pages with a video, you will see a placeholder. Clicking "Load video" creates the embed and connects to YouTube's servers. This is your affirmative action and constitutes consent for that specific embed load.
| Name / Pattern | Provider | Purpose / Notes | Duration |
|---|---|---|---|
| VISITOR_INFO1_LIVE / YSC / others | YouTube / Google | Set by YouTube after you click "Load video". Used to measure video engagement and, if you are signed into Google, to associate the view with your account. Only set after your explicit action. | Session to 6 months |
Analytics cookies None active
We do not currently use analytics cookies. We plan to add Google Analytics in the future. When we do, analytics cookies will be classified as non-essential and will require your prior consent before they are set. This policy will be updated with a full cookie table before that service goes live.
Advertising / targeting cookies None active
We do not currently use advertising cookies. We may in the future display advertisements via Google AdSense or similar services. Advertising cookies will require your explicit prior consent. This policy will be updated before such cookies are introduced.
4. How to manage cookies
Cookie settings
Once our consent management platform (Termly) is fully configured, you will be able to review and adjust your non-essential cookie preferences at any time via the link in the site footer.
Browser settings
You can control cookies directly in your browser. Most browsers allow you to block all cookies, delete existing cookies, or receive a warning before a cookie is set. Blocking strictly necessary cookies may prevent the admin area from functioning. Public visitors are unaffected.
Guidance: Chrome, Firefox, Safari, Edge.
5. Changes to this policy
We will update this Cookie Policy before introducing any new non-essential cookies or tracking technologies. The effective date at the top reflects the most recent revision.
6. Contact
For questions about our use of cookies, see our Privacy Policy or contact us via the contact form.