Menhir Cookie Policy
Version 1.0 Effective date: 12 July 2026 Last updated: 12 July 2026
1. Who we are
This policy is issued by Tobias Franklin, trading as Menhir ("Menhir", "we"), of 14 Printworks Road, Frome, Somerset, BA11 1GN, United Kingdom, contactable at [email protected]. It covers www.menhiros.com, app.menhiros.com, and portal.menhiros.com.
2. The short version
Menhir uses no advertising cookies, no analytics cookies, and no tracking of any kind. The only cookies we set are those needed to keep you signed in, one preference cookie, and the cookies Stripe needs to take payments securely.
Our marketing site, www.menhiros.com, sets no cookies at all.
3. What cookies are
Cookies are small text files a website stores on your device. "Strictly necessary" cookies are essential for a service you have asked for (such as staying signed in) and do not require consent under the Privacy and Electronic Communications Regulations (PECR). Other kinds — such as analytics or advertising cookies — require consent; we do not use any of those.
4. The cookies we use
| Cookie | Set by | Where | Purpose | Type | Expiry |
|---|---|---|---|---|---|
sb-*-auth-token (may be split across numbered parts) |
Supabase (our authentication provider) | app.menhiros.com, portal.menhiros.com | Keeps you securely signed in after you use your sign-in link | Strictly necessary | Persistent; cleared when you sign out or your session expires |
menhir_topo_bg |
Menhir | app.menhiros.com | Remembers whether you have the map background switched on | Functionality (set only when you use the toggle) | 1 year |
__stripe_mid |
Stripe | Client portal payment pages | Fraud prevention when making a card payment | Strictly necessary for payment | 1 year |
__stripe_sid |
Stripe | Client portal payment pages | Fraud prevention when making a card payment | Strictly necessary for payment | 30 minutes |
Stripe's cookies are set only on pages where a payment form is shown, and are governed by Stripe's cookie policy.
5. Third-party content (not cookies)
Some of our pages load content directly from third parties — fonts from Google Fonts, icons from the unpkg CDN, and, in the client portal, map tiles from OpenStreetMap and flag images from flagcdn.com. Loading content this way shares your IP address with the service providing it, as with any resource on the web, but these services do not set cookies on our pages and we share no other data with them.
6. Managing cookies
You can block or delete cookies through your browser settings — see your browser's help pages (Chrome, Safari, Firefox, Edge). Please note that blocking the sign-in cookie will prevent the platform and client portal from working, since there is no other way to keep you signed in.
7. If this ever changes
If we ever introduce non-essential cookies (for example, analytics), we will update this policy and add a consent mechanism first — nothing non-essential will be set without your agreement.
8. Contact
Questions about this policy: [email protected].