About this policy
This policy concerns the new cad-map.co.uk website operated by Cadmap Limited. It does not describe the separate cadmap.co.uk website. It covers cookies and similar technologies which store information on, or access information from, your device.
This draft reflects a review of the new site’s code and public browsing, including its signed-out administrator pages. Published hosting behaviour and a successful administrator sign-in have not yet been verified. This is not a guarantee of legal compliance.
Cookies and similar storage
Cookies are small pieces of information stored by your browser and usually sent back with requests to the relevant website. Local storage keeps information for a website in your browser until it is removed; it has no automatic expiry. Session storage normally lasts for the browser tab’s session, although browsers may restore it when reopening a session. These technologies can fall under the same storage and access rules, even when they do not contain personal information.
A browser’s ordinary cache may also retain downloaded pages, fonts, images and video so they can load again. This is different from a tracking identifier. Server-side enquiry records are not cookies or browser storage.
What the new site currently uses
No cookies or local-storage entries were observed in the checked public pages or signed-out administrator pages. A session-storage entry for remembered scroll positions was observed during the audit and has since been disabled. The current application does not enable that optional preference storage.
| Storage / name | Provider and purpose | Lifetime / current status |
|---|---|---|
Administrator local storagesb-…-auth-tokenSite-specific name pattern | Lovable Cloud authentication, used by Cadmap Limited to maintain a requested administrator sign-in and refresh its authentication tokens. Not used for advertising. | Configured in the application; not observed signed in. Local storage has no fixed expiry. Token validity and refresh are separate from storage lifetime. Sign out or clear site data to remove the saved session. |
Session storagetsr-scroll-restoration-v1_3 | Cadmap Limited’s navigation software (TanStack Router): page/element scroll positions for returning to a previous position. | Previously observed; now disabled. An entry from an earlier visit may remain until the tab session ends or you clear it. There was no separately configured timed expiry. |
The authentication name varies with the site’s authentication service. We do not describe unobserved temporary sign-in keys or hosting cookies as if they were confirmed. Exact signed-in storage and any hosting-added cookies remain subject to the checks below.
Essential sign-in and security
When an authorised administrator requests access to the private editor or enquiries inbox, authentication storage supports that access. Storage strictly necessary for a service you request does not require cookie consent when used only for that necessary purpose. This does not make every security-labelled or login-related technology automatically exempt.
You do not need to sign in to browse the public site. Clearing or blocking authentication storage may sign you out or prevent private access. Public form fields and the introduction do not create a saved preference entry in the reviewed code.
Analytics, marketing and external resources
No active analytics tags, advertising pixels or embedded third-party players were identified in the reviewed application or checked browsing. This is a finding from those checks, not a claim that all future or hosting-added technology has been ruled out. References to Google Analytics in the preserved older Privacy Notice are not evidence of installation on this new site.
The audit initially found requests to Google Fonts (fonts.googleapis.com and fonts.gstatic.com), sharing normal connection information such as your IP address with Google. The same fonts are now served locally, so the application no longer requests Google’s font service. Images and the introduction video were requested through the site during the checks. Social and other external links take you to separate websites rather than loading embedded social trackers here; those websites have their own policies.
Development previews may include Lovable editor tools and error-reporting hooks, plus development-server scripts. The editor may broker administrator session storage inside its preview. These are distinct from the new site’s own tracking configuration. Whether the published host adds security or measurement technology must be checked on the published site.
When consent or an objection choice is needed
The ICO’s guidance provides purpose-limited exceptions, including communication, strictly necessary services, statistical purposes, appearance preferences and emergency assistance. Each has conditions. Analytics is not automatically exempt: the statistical exception concerns use solely for statistics about the service to improve it, with safeguards including non-identifying aggregate results, limited retention before aggregation and restrictions on a provider’s use. The statistical and appearance exceptions require clear information and a simple, free way to object.
We have disabled the optional stored scroll-position preference rather than relying on an appearance exception without an objection control. No consent-required technology was evidenced in the reviewed application, so no consent pop-up or advertising has been added. If such technology is introduced, it must remain blocked until valid consent, with equally accessible accept, reject and manage choices and an easy way to withdraw. Essential authentication must remain separate. This policy and the actual choices must be updated before that use begins.
Managing storage and contacting us
Use your browser’s privacy or site-data settings to inspect, block or delete cookies and other storage for cad-map.co.uk. To remove an old scroll-position entry, clear the site’s session storage or end the tab session; session restoration may retain it. For private access, use Sign out first, then clear the site’s local storage if required. These actions may affect sign-in and remembered browser behaviour but do not delete enquiries already saved on the server.
There is currently no saved marketing-consent choice to change in this application. You can ask about this policy or report unexpected storage by emailing info@cadmap.co.uk. For wider handling of personal information, see our Privacy Notice. Its preserved substantive wording awaits Mike’s review, including older analytics and cookie statements.
Review before launch
Mike’s approval, a real authorised administrator storage check and a published-site check of hosting-added scripts, storage names, purposes and lifetimes are outstanding. Any additional technology must be assessed and disclosed, with consent or objection controls where required, before being enabled. We will review this policy when the site’s use changes.