Compliance

Cookie Policy

Last updated: 13 June 2026

This page explains how ShopRunner uses cookies and similar browser storage. We keep our use of cookies deliberately minimal. We do not use advertising or cross-site tracking cookies.

1. What Cookies Are

Cookies are small text files a website saves in your browser. We also use related browser storage (localStorage, sessionStorage) for the same purposes. In this policy, "cookies" covers all of these mechanisms.

2. Categories We Use

Strictly necessary

Required for the website and app to function. These do not need consent under UK PECR or EU ePrivacy because they are essential to providing the Service you requested.

Cookie / storagePurposeLifetime
Session tokenKeeps you signed in.Up to 30 days, or until you sign out.
CSRF tokenProtects forms against cross-site request forgery.Session.
Active business preferenceRemembers which of your businesses you last selected.Until cleared.
Device IDUsed for security monitoring and rate-limiting suspicious logins.Up to 12 months.

Functional

Remember choices you have made to improve your experience. These are also stored locally; we do not share them with any third party.

Cookie / storagePurposeLifetime
Theme preferenceRemembers your interface preferences.Until cleared.
Language / regionRemembers your preferred language and currency.Until cleared.

Security

Set by Cloudflare Turnstile on the contact form to distinguish humans from bots. This challenge expires once you submit the form.

Analytics

We do not use cookie-based analytics. Any product usage analytics are aggregated server-side and do not require a cookie or fingerprinting.

Advertising

We do not run advertising. No advertising cookies are set by Runner Technology Ltd.

3. Cookies Set by Others

A small number of cookies may be set by services that help us run ShopRunner - for example, when Cloudflare protects our infrastructure from attack. We have configured these services to be as privacy-respecting as possible and to avoid tracking.

4. Your Choices

  • Block cookies in your browser - every modern browser lets you block or delete cookies. Blocking strictly-necessary cookies will sign you out and prevent the app from working.
  • Clear app storage - on mobile, you can clear app data through your device settings. This signs you out and removes all local preferences.
  • Do Not Track - we honour the Global Privacy Control (GPC) signal where your browser sends it. Since we do not sell or share personal information for advertising, GPC has no additional effect beyond our default behaviour.

5. Changes

If we change which cookies we set, we will update this page and adjust the "Last updated" date. Material changes will also be announced in-app or by email.

6. Contact

Questions about this policy? Email [email protected].