Cookies and analytics: what this site stores

1. What this site sets

Cookies set by this site
Name	What it does	Type	How long it lasts
`ap_consent`	Set only if you press accept or reject analytics. Those buttons appear only once an analytics provider is named on this page, so today it is not set. Remembers your choice, so the question is not put to you again. Holds one word, granted or denied, and nothing else.	Essential	6 months from your choice
`case_ref`	Set only when you submit a form. Carries your reference number to the page that confirms it, so the reference never has to travel in the web address. Scripts on the page cannot read it.	Essential	5 minutes, and only on the confirmation page
Analytics cookies	None: no analytics provider is running. A provider would be named here before it was switched on, and would set nothing until you accepted.	Optional	None

Scroll sideways for more →

1.1Both essential cookies are our own, restricted to this site, and are not read by anyone else. There are no advertising cookies, no social-media tracking pixels and no third-party tracking scripts.

2. Changing your mind

2.1No analytics provider is running on this site, so there is nothing to accept or reject and you do not need to choose anything. If a provider is ever added, it will be named on this page and you will be asked then.

3. Other things kept in your browser

3.1Only while analytics is running and you have accepted it, the page that confirms a request leaves a short marker in session storage so that a refresh is not counted as a second request. It holds nothing but the figure 1, it is not a cookie, it is not read by anyone else, and it disappears when you close the tab. With no analytics running, it is never written.

4. What analytics would and would not record

4.1It would record which pages were viewed, which route out of a page was taken, and that a form was started, submitted or failed validation. The page address is cut back to the site and the page name (anything after a question mark or a # is removed) before it is sent, so a reference number in a link never reaches the provider.
4.2It would never record your name, your contact details, what you sent us, your photographs, what your items turned out to be or the amount of your offer. What may be sent is fixed in the site's code and checked by automated tests, not left to a tag manager.

Version 0.3.4 · 1 October 2026 · Next review by 1 October 2027, or sooner if anything new is set on your device · Drafted in-house; legal review pending. How the underlying personal data is handled is set out in the privacy notice.

0.3.4, 1 October 2026. Wording only. The table row for ap_consent now says that the accept and reject buttons are not shown while no analytics provider is named, so the cookie is not set today, as clause 2.1 and the 0.3.3 entry below already said.
0.3.3, 1 October 2026. The table said your browser cannot read the case_ref cookie; it is the scripts on the page that cannot read it. With no analytics provider running, the accept and reject buttons are no longer shown, because there is nothing to consent to; clause 2.1 says so and that a provider would be named here first. The analytics row now gives no lifetime while none runs. Clause 4.1 reworded in plain English. Nothing new is set on your device.
0.3.2, 29 September 2026. The opening paragraph said two cookies “keep the site working” and that the confirmation page always leaves a session-storage marker. In the code, ap_consent is set only when you press accept or reject, case_ref only when a form is submitted, and the marker only while analytics is running with your consent. With no analytics provider configured, the opening, the table and clause 3.1 now say so. Nothing new is set on your device.
0.3.1, 21 September 2026. The summary shown in search results said there was one essential cookie; the table lists two, and the session-storage marker, so the summary now says so. The opening paragraph no longer says all three are in the tables: the marker is described in clause 3.1 rather than in a table.
0.3, 19 September 2026. The opening paragraph corrected: it said nothing else was stored on your device, and clause 3.1 then disclosed a session-storage marker. The marker is now named at the top as well. The accept and reject controls on this page no longer disappear when you press them, so a keyboard or screen-reader user is not left with focus on nothing; both stay in place and report which one is active.
0.2, 19 September 2026. First version to carry a version line. The cookie schedule checked against the code that writes each cookie.