Cookie Policy
What cookies Scan Yer Van uses and why.
Last updated: 19 September 2026
What are cookies?
Cookies are small text files that a website stores on your device when you visit. They help the site remember information about your visit — for example, whether you're logged in — so you don't have to re-enter it every time.
How we use cookies
Scan Yer Van uses only essential cookies — cookies that are strictly necessary for the site to function. We do not use advertising, tracking, or analytics cookies.
Because we only set essential cookies, we do not require your consent to place them under UK PECR rules. You will not see a cookie consent banner.
Website analytics
To see how our public website is used, so we can improve it, we use Cloudflare Web Analytics. It works without cookies: it counts page views, referring sites, browser and device types, countries and page speed. It doesn't store your IP address, doesn't follow you across other sites, and isn't used for advertising. It isn't used on signed-in pages or on the scan links printed on stickers.
UK law lets us measure our own website this way without asking first, as long as we tell you and you can say no. You can turn it off for this browser below. If your browser sends the Global Privacy Control signal, we treat that as a no automatically.
Analytics is on for this browser.
Turning it off takes effect from the next page you open.
Cookies we set
CSRF protection
Name: __Host-xsrf — Session only (deleted when you close your browser)
Protects forms on the site against cross-site request forgery (CSRF) — a standard security measure for any site that accepts form submissions.
Authentication session
Name: SyvIdentity — Up to 90 days, or just your current session if you don't choose "keep me signed in"
Set when you sign in with a login code. Keeps you signed in to your dashboard so you don't have to enter a code on every visit. Ticking "keep me signed in on this device" keeps it for up to 90 days; leaving it unticked makes it last only until you close your browser.
Sign-up progress
Names: syv.bpid, syv.prid — Up to 12 hours
Store an anonymous identifier while you sign up or pre-register, so we can restore your progress if you navigate away before finishing. They contain no personal information.
Invite access
Name: syv.invite — Up to 30 days
Set when you enter a valid invite code while sign-up is open by invitation only. It remembers your invite code so you can go on to sign up. It contains no personal information.
Friend's referral
Name: syv.referral — Up to 30 days, or until you sign up
Set when you follow the link in an invite a friend sent you. It keeps their discount ready for you at checkout, and makes sure they're thanked when you join. It holds a random reference, not your details or theirs, and is deleted once your sign-up goes through.
Analytics turned off
Name: syv.analytics-off — 1 year, only if you turn analytics off
Set when you choose Turn off analytics above, so we remember not to measure your visits. It holds only the value "1".
One-time messages
Name: syv.msg — Session only (deleted when you close your browser)
Carries a short message from one page to the next — for example, a confirmation after you save a change. It is removed once the message has been shown.
Two-step sign-in
Name: syv.2fa — Up to 5 minutes
Only set for accounts that use an authenticator app. It remembers who is signing in between entering the login code and entering the authenticator code.
Third-party cookies
A small number of third-party services set their own cookies when you use the features that need them — secure payment (Stripe) and bot-prevention on our forms (Cloudflare Turnstile). These are limited to what is strictly necessary for those functions, which is why they don't change our essential-only position or require a consent banner. We don't control the detail of these cookies; see each provider's policy below.
Cloudflare Turnstile
Used on our sign-up and contact forms to distinguish human visitors from bots. Turnstile is privacy-friendly — it does not set tracking cookies or share behavioural data with third parties.
See Cloudflare's Privacy Policy for details.
Stripe
Used on checkout pages to process payments securely. Stripe may set cookies for fraud prevention and session management during the payment flow.
See Stripe's Privacy Policy for details.
Controlling cookies
You can control and delete cookies through your browser settings. Note that disabling essential cookies will prevent parts of the site from functioning correctly — for example, you won't be able to stay logged in to your dashboard.
For guidance on managing cookies in your browser, visit aboutcookies.org.
Questions
If you have any questions about our use of cookies, please use our contact page.