Last updated: 29 August 2026
Most cookie notices hide what is actually going on. This page lists every cookie we set, why, and for how long. We set a small number of cookies that the site needs to work, and one optional set for Google Analytics that only exists if you press “Accept all” on the cookie bar. Nothing analytical is set until you choose, and you can change your mind from the “Cookie settings” link in the footer of every page.
A cookie is a small text file a website stores in your browser. Some are needed for the site to work at all, for example keeping you signed in. Others measure how a site is used. The rules in the UK (the Privacy and Electronic Communications Regulations and UK GDPR) say the second kind needs your consent first, which is why the cookie bar exists.
These are strictly necessary. The site, the directory or the platform cannot do what you asked without them, so they are set without consent.
| Cookie | Where | Purpose | Lasts |
|---|---|---|---|
upsidia_consent | upsidia.com, including app.upsidia.com | Remembers whether you accepted or rejected analytics cookies, once for the whole site | 6 months |
upsidia-session | Blog, newsletter, pricing pages and the Upsidia platform | Keeps your session and sign-in working | 2 hours of inactivity |
XSRF-TOKEN | Same pages as above | Protects forms against cross-site request forgery | 2 hours of inactivity |
__stripe_mid, __stripe_sid | Pages where a card payment is taken | Set by Stripe, our payment provider, to detect fraud | 1 year, 30 minutes |
__cf_bm, cf_clearance | Any page, when Cloudflare needs them | Set by Cloudflare, which protects the site from bots and attacks | Up to 30 minutes, up to 1 year |
Cloudflare Turnstile, the “prove you are human” check on our forms, does not set cookies of its own.
If you press “Accept all”, we load Google Analytics 4. It sets:
| Cookie | Purpose | Lasts |
|---|---|---|
_ga | Tells Google Analytics that separate page views come from the same browser | 2 years |
_ga_<id> | Keeps track of a single visit and its pages | 2 years |
What we learn from this: which pages people visit, roughly where visitors are (country and city level), which device and browser they use, and which pages lead to enquiries. What we do not do: we do not use Google’s advertising features, Google signals are switched off, and we do not link analytics data to your name, email or account.
Google processes this data as our provider. Its own policy is at policies.google.com/privacy. If you press “Reject all”, none of this loads and no Google cookie is set. If you accept and later reject, we switch the tracking off and delete the Google cookies we can reach.
The Upsidia platform at app.upsidia.com keeps a few interface preferences in your browser’s local storage, for example whether the sidebar is collapsed. These are not cookies, they are not sent to us, and they are not used for tracking. Error reports from the platform go to PostHog in memory only, with no cookie and no storage.
The same bar, and the same choice, cover the whole of upsidia.com: the marketing site, blog, pricing, directory, the business pages hosted at upsidia.com/b/, and the Upsidia platform at app.upsidia.com, including the pages customers reach from a booking, quote or invoice link. Choose once and it holds everywhere. Inside the platform, Google Analytics sees which screens are used and for how long; it does not receive your name, email, account or customer data, and links that carry a private token are reported without it.
The booking form that businesses embed on their own websites is different. It sets no analytics cookies unless we have switched that on, in which case the bar appears inside the form and nothing loads until you accept there too.
Use the “Cookie settings” link in the footer of any page to see the cookie bar again and choose differently. You can also delete or block cookies in your browser settings. Blocking the strictly necessary cookies will stop sign-in and forms from working.
Contact us through the contact form and mention cookies. Our Privacy Policy explains how we handle personal data more widely.