Cookie Policy

Last updated: 2026-06-22

This policy explains how CanopyBeacon (canopybeacon.uk) uses cookies and browser local storage in accordance with the Privacy and Electronic Communications Regulations 2003 (PECR) and UK GDPR.

1. Strictly Necessary (No Consent Required)

These are essential for the platform to function and cannot be disabled.

Key	Storage	Purpose	Expiry
firecommand_token	sessionStorage / localStorage	JWT auth token; controls access to the platform	24 hours
firecommand_refresh_token	sessionStorage / localStorage	Token refresh; maintains session without re-login	7 days
firecommand_user	sessionStorage / localStorage	User profile cache (id, role, brigadeId — no email)	Session / 7 days
firecommand_brigade_accent	localStorage	Brigade brand colour for UI theming	Persistent
fc_region	localStorage	Selected region (UK / AU) for region-appropriate content rendering	Persistent

2. Functional (Consent Required)

These enhance your experience. You can opt out via the cookie banner on first visit.

Key	Storage	Purpose
sidebar_collapsed	localStorage	Remembers sidebar open/closed state between sessions
cookieConsent	localStorage	Records your cookie consent choice (required by PECR); stores essential flag, analytics flag, and timestamp

3. Analytics (Explicit Opt-In Required)

Analytics are only activated if you click “Accept all” or enable analytics via “Manage” in the cookie banner. We use PostHog (EU cloud endpoint) with session recording disabled and IP masking enabled. No personally identifiable information is sent.

Key / Cookie	Set by	Purpose
ph_*	PostHog (EU region)	Anonymous usage analytics; no PII; EU cloud endpoint only; helps us improve CanopyBeacon

4. Cookie Banner & Consent

On first visit to canopybeacon.uk, a PECR-compliant cookie banner is displayed. It offers:

Accept all — enables essential + analytics cookies
Essential only — enables only strictly necessary cookies
Manage — reveals granular per-category checkboxes before confirming

Your choice is stored in localStorage.cookieConsent as {"essential":true,"analytics":bool,"ts":"<iso-date>"}. No consent information is sent to our servers.

5. Managing & Revoking Consent

You can withdraw or change your consent at any time using any of these methods:

Clear site data in your browser — In Chrome/Edge: Settings → Privacy and security → Cookies and other site data → See all site data → find canopybeacon.uk → Delete. In Firefox: Preferences → Privacy & Security → Cookies and Site Data → Manage Data. The cookie banner will reappear on your next visit.
DevTools (advanced) — Open DevTools (F12) → Application → Local Storage → canopybeacon.uk → delete the cookieConsent key.
Browser-level controls — Most browsers allow you to block or delete cookies through their Settings menus. Note that disabling all storage will prevent you from signing in.

6. Contact

Cookie queries: [email protected]