Legal · UK

Cookies policy

Last updated: April 14, 2026

This policy is written for users in the United Kingdom and addresses rules under the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR), together with the UK General Data Protection Regulation (UK GDPR) where personal data is involved. It is a practical summary and does not replace legal advice.

1. What this policy covers

This policy explains how Gifease (“we”, “us”) uses cookies and similar technologies (for example local storage, session storage, pixels, and software development kits) when you visit or use our website and related services. For wider privacy matters, see our Privacy policy.

2. Legal framework in the UK

Under PECR, storing or accessing information on a user’s device (such as setting a cookie) is generally only permitted if it is strictly necessary to provide a service explicitly requested by the subscriber or user, or if you have given consent that meets UK standards (informed, specific, and freely given) for non-essential uses.

Where cookies or similar technologies involve personal data, the UK GDPR also applies to how we process that information. The UK Information Commissioner’s Office (ICO) publishes guidance on cookies and consent — see ico.org.uk — cookies and similar technologies.

3. How we classify cookies

  • Strictly necessary: required for core operation you have asked for (for example keeping you signed in securely, load balancing, fraud prevention, remembering cookie choices). These are typically exempt from the consent requirement under PECR when they meet the “strictly necessary” test.
  • Functional / preferences: remember choices you make (such as display theme) where those features are not strictly essential to deliver the service. Where UK law requires consent for these on our implementation, we aim to obtain it (for example through a preference centre or banner) before we use them.
  • Analytics and performance: help us understand how the service is used in aggregate. Where these technologies are not strictly necessary, we will only enable them based on your consent where UK rules require it.

4. Technologies we use on Gifease

The exact names and lifetimes of cookies can change as we update the product. Below is a representative description of what you may encounter when using the site from the UK.

CategoryPurposeLegal basis (UK)
Authentication & sessionCookies or tokens used by our authentication provider (for example Supabase) to keep your session secure, refresh your login, and protect accounts.Strictly necessary to provide the signed-in service you request.
Security & infrastructureCookies or headers set by our hosting or edge network (for example to resist abuse, maintain availability, or route traffic).Strictly necessary for security and delivery of the site.
Theme / UI preferencesLocal storage or similar may remember display preferences (such as light or dark mode) on your device.Where not strictly necessary, we rely on consent where required; you can clear site data in your browser at any time.
Analytics (production)Where enabled, our hosting or analytics partner may use cookies or similar tools to collect aggregated usage information (for example page views) to help us improve the product.Consent where required under PECR for non-essential analytics; we aim to gate these behind your choices where applicable.

5. Consent and your choices

For cookies and similar technologies that are not strictly necessary under PECR, we will ask for your consent in line with ICO guidance (for example through a cookie banner or preference controls when we deploy them). You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

You can also use your browser settings to block or delete cookies and to clear local storage. If you block strictly necessary cookies, parts of Gifease (such as staying signed in) may not work correctly.

6. Third parties

Some cookies are set by third parties that provide services to us (for example authentication, hosting, or analytics). Their use is described in their own policies as well as in this summary. We choose providers with appropriate safeguards, but we do not control every third-party cookie that may be triggered if you follow external links from Gifease.

7. Data retention

Session cookies typically expire when you close your browser; persistent cookies and stored preferences last for the period shown in your browser or until you delete them. We configure our services to keep retention no longer than necessary for the purpose.

8. Your rights (UK GDPR)

Where processing involves your personal data, you may have rights under the UK GDPR (for example to access, rectify, erase, restrict, or object to certain processing, and to complain to the ICO). See our Privacy policy for how to exercise rights and contact us.

9. Changes

We may update this Cookies policy to reflect changes in law, guidance, or our practices. We will revise the “Last updated” date and, where the change is material, provide additional notice (for example on the site or by email where appropriate).

10. Contact

Questions about this Cookies policy: use our contact page.