Cookie Notice

Last updated September 1, 2026

This notice explains what Eggtrail stores on your device, why, and how to get rid of it. It sits alongside our Privacy Notice, which covers what we do with information generally.

The short version

Four cookies. Two of them keep you signed in. Two of them count page views for Google Analytics. There are no advertising cookies on this site and nothing here follows you to another one.

1. What a cookie is

A cookie is a small file a website asks your browser to keep and hand back on the next request. A "first-party" cookie is one we set. A "third-party" cookie is one set by somebody else whose code runs on the page — for us that is Google Analytics and nobody else.

2. What this site sets

Name Set by What it is for How long it lasts
_eggtrail_session Us Keeps you signed in and carries the token that stops a third-party site forging a form post as you. Set on every visit, signed in or not. Until you close your browser
remember_user_token Us Signs you back in without a password. Set only if you tick "Remember me" on the sign-in form, and deleted when you sign out. 14 days
_ga Google Analytics Tells us how many people read a page, and roughly where in the world they were — so we can tell whether anybody is finding us. 2 years
_ga_1BZ6MDHHCV Google Analytics The same service, keeping track of a single visit. The name ends in our measurement ID, which is printed in this page's source. 2 years

The first two are marked HttpOnly and SameSite=Lax — a script cannot read them, and they are not sent when another site links to us.

3. What this site does not set

  • No advertising or retargeting cookies. A Meta (Facebook) pixel ran on our marketing pages between 2026 and September 2026 and has been removed. Nothing replaced it. We do not sell personal information and we do not share it for cross-context behavioral advertising.
  • Nothing from a content delivery network. Our stylesheets, the QR decoder and the map library are served by us rather than borrowed from somebody else's server, so they set nothing and see nothing. A hunt has to work on a museum's guest wifi.
  • No cookies you have to accept to play. Joining a trail takes a team name. It does not take an account, an email address or a date of birth.

4. Storage that is not a cookie

One thing is kept in your browser's local storage rather than in a cookie: eggtrail.mcp.setup remembers whether you left the "connect your AI assistant" panel open, because that job runs across two screens. It holds no personal information, it is never sent to us, and clearing your site data removes it.

5. On the pages children use

We are specific about this because schools and libraries ask, and the honest answer has two halves.

The half in our favour: a child scanning a code needs no account, gives no email address and no password, and we do not record where they are. There is no advertising tag on any page of this site, so a child scanning a code is never reported to an advertising network by us.

The half we will not hide: Google Analytics runs on every page of this site, and that includes the trail board and the cards a player scans. It counts page views and sets the two cookies above. If your institution's policy does not allow that, tell us — it is a single setting, and the trail works without it.

The full technical answer, including what a guest account does and does not hold, is on our accessibility and data page.

6. How to refuse or remove them

We do not show a cookie banner, so the analytics cookies are set when you open the site. These are the controls that do work:

  • Your browser. Every major browser can block or delete cookies for one site, and can be set to clear them each time it closes. Look for "Cookies and site data" in its settings. Note what blocking ours costs: without the session cookie you cannot sign in, so if you run a trail you will need to allow it.
  • Google's own opt-out. The Google Analytics opt-out browser add-on stops Analytics collecting anything from you, on this site and every other one.
  • Private browsing. A private or incognito window throws all of it away when you close it.

Blocking the analytics cookies costs you nothing. Every trail, card, leaderboard and printable QR sheet works exactly the same way without them.

7. Changes to this notice

If we add or remove something that stores data on your device, this page changes in the same commit and the date at the top moves. It is checked against the running code by an automated test, so it cannot quietly fall out of date.

8. Asking us about it

Questions about this notice, or a request to run a trail with analytics switched off, reach us at hello.eggtrail@pm.me or through our contact form.