MaxPetCookie Policy
This Cookie Policy explains how MaxPet (“we”, “us”, “our”), accessible at maxpet.co.uk, uses cookies and similar technologies when you visit our website, and the choices you have. It should be read together with our Privacy Notice. MaxPet is operated by MaxPet Limited (a company registered in England and Wales, company no. 17336437, registered office 66 Paul Street, London EC2A 4NA) from the United Kingdom, and this policy is written to comply with the Privacy and Electronic Communications Regulations 2003 (PECR) and the UK GDPR.
1. What are cookies and similar technologies?
Cookies are small text files placed on your device when you visit a website. Similar technologies (such as your browser’s “local storage”) store small amounts of information in the same way. They let a site remember things between pages or visits — for example, to keep you securely signed in. Cookies can be “first‑party” (set by us) or “third‑party” (set by another organisation), and either “session” (deleted when you close your browser) or “persistent” (kept for a set time).
2. The cookies and storage we use
MaxPet uses only a small number of strictly necessary cookies and functional storage. These are required to make the site work and keep your account secure.
| Name | Provider | Type | Purpose | Expiry |
|---|---|---|---|---|
maxpet_session |
MaxPet (first‑party) | Strictly necessary | Keeps you signed in. Without it you could not log in or use your account. | Up to 30 days; cleared when you sign out |
maxpet_csrf, maxos_apple_state |
MaxPet (first‑party) | Strictly necessary (security) | Protect forms and sign‑in against cross‑site request forgery. maxos_apple_state
is set only while you are signing in with Apple, to confirm the sign‑in finished in the
same browser that started it. |
maxpet_csrf: with your session · maxos_apple_state: 15 minutes |
maxpet_pet, maxpet_guest, maxpet_share,
maxpet_vet_sections, maxpet_flash |
MaxPet (first‑party) | Strictly necessary | Remember which pet you are viewing, whether you are in guest/demo mode, that you are viewing a shared link, which sections you chose for a vet summary, and one‑time status messages (“Saved”, “Deleted”). They carry no analytics and are not shared. | Session to 30 days; maxpet_flash is deleted as soon as it is shown |
__cf_bm / cf_clearance |
Cloudflare (our hosting, security & content‑delivery provider) | Strictly necessary (security) | Helps protect the website from malicious bots and abusive traffic. Set by Cloudflare when its security features are triggered. Not used for advertising or tracking. | __cf_bm: ~30 minutes · cf_clearance: up to 1 year |
Local storage (not cookies):petos_cond_sort, petos_cookie_consent |
MaxPet (first‑party) | Functional | Remembers small display preferences (for example how you sort records) and your cookie choice. This stays on your device and is never sent to us. | Until you clear your browser storage |
3. Analytics & other optional cookies
We don’t use any. MaxPet sets no analytics, advertising, marketing or profiling cookies of any kind. We removed Microsoft Clarity session recording and our referrer‑attribution cookie in July 2026, so nothing about your visit is sent to a third party, and there is no optional cookie left to accept or decline. We do not sell your personal data and we do not share it with advertisers or data brokers.
4. Third‑party resources
Some content is loaded from third parties to display the site. These do not set cookies, but the request necessarily shares your IP address with the provider:
- Google Fonts (
fonts.googleapis.com,fonts.gstatic.com) — used to display the site’s typeface. Google does not set cookies for this, but processes your IP address to deliver the font. - cdnjs (Cloudflare) — loads a PDF‑generation library only on the Vet Summary page, and only when you choose to create a PDF. No cookies are set.
5. Your choices
Because every cookie we set is strictly necessary, there is no consent banner and nothing to opt in or out of. Under PECR we must tell you about these cookies, which is what this page is for — consent is only required for non‑essential ones, and we don’t set any. If that ever changes, we will ask you before setting them.
You can also control cookies through your browser settings, including deleting or blocking them. Please note that blocking strictly necessary cookies will stop core features such as signing in from working.
6. Legal basis
Under PECR, strictly necessary cookies (those essential to provide a service you have requested, such as signing in) do not require consent, but we must tell you about them — which is the purpose of this policy. Any non‑essential cookies require your prior consent, which you can give or withdraw at any time. Where we process personal data, we do so in accordance with the UK GDPR.
7. Changes to this policy
We may update this Cookie Policy from time to time. Any changes will be posted on this page with a revised “last updated” date.
8. Contact
If you have any questions about this policy or how we use cookies, contact us at [email protected].