Legal
Cookie Policy
This Cookie Policy explains how Optana Limited, trading as Bakerly ("Bakerly", "we"), uses cookies and similar technologies on bakerly.co.uk and on the portal and admin subdomains. Cookies set by tenant storefronts (e.g. .bakerly.co.uk or a bakery's custom domain) are described separately at the bottom of this policy and in each bakery's own cookie notice.
For background, a cookie is a small text file that a website stores on your device to remember preferences, keep you signed in or measure how the site is used.
1. Strictly necessary cookies
These are required for the Service to function. They are exempt from the consent requirement under the Privacy and Electronic Communications Regulations (PECR).
| Cookie | Purpose | Lifetime |
|---|---|---|
sb-*-auth-token | Authentication session (Supabase) | 7 days, refreshed |
sb-*-auth-token-code-verifier | OAuth / magic-link code exchange | Session |
bakerly_tenant_id | Active tenant for users with multiple bakeries | 1 year |
bakerly_basket | Items in a customer's storefront basket | 30 days |
You cannot turn these off and continue to use the Service.
2. Functional cookies
We do not currently set non-essential functional cookies on Bakerly's own marketing site or portal beyond those listed above.
3. Analytics
The Bakerly marketing site at bakerly.co.uk loads Google Tag Manager and, through it, Google Analytics 4 ("GA4"). Both run with Google Consent Mode v2 set to denied by default, which means:
- No analytics cookies are set on your device unless and until you give consent.
- GA4 still receives anonymous, cookieless "consent ping" events so we can see aggregate page-view counts. These pings do not identify you and do not persist a client ID.
We show a cookie banner on your first visit. If you accept, GA4 sets
its standard cookies (_ga, _ga_*) and we get full session-level
analytics. If you reject, GA4 stays in cookieless ping mode and no
Google analytics cookies are written. Your choice is remembered for
180 days, after which we ask again.
You can change your mind at any time using the Cookie settings
link in the footer of every page. Choosing "Reject" there stops new
analytics cookies from being set. Existing _ga_* cookies expire on
their own (within 13 months) - you can also delete them through your
browser's site-data controls.
Google Tag Manager itself does not set tracking cookies in our configuration.
The portal and admin surfaces (app.bakerly.co.uk,
admin.bakerly.co.uk) do not load Google Tag Manager or Google
Analytics. They use server-side error tracking (Sentry) for operational
stability; Sentry does not set tracking cookies.
4. Marketing cookies
Bakerly does not currently use marketing cookies on our own marketing site. Where we run paid campaigns we may add tracking pixels in the future; consent will be requested before any such cookie is set.
5. Cookies on tenant storefronts
When you visit a bakery's storefront on Bakerly:
- A
bakerly_basketcookie is set so items survive a page refresh. - The bakery may have enabled Google Analytics 4 and/or Meta Pixel through their Bakerly admin settings. Where they have, those tools set their own cookies and the bakery is the controller of the data they collect. Each storefront's cookie notice (linked from the storefront footer) lists which third-party cookies are active for that specific site.
- When a customer pays, Stripe or Worldpay (depending on the payment provider the bakery has connected) may set cookies during the payment flow on their own checkout pages. Those cookies are governed by the relevant provider's policies.
6. Managing cookies
You can:
- Block or delete cookies through your browser settings (consult your browser's help pages for instructions).
- Use private / incognito browsing to limit what is stored.
- Withdraw or change any consent you've given via the cookie banner on a page that displays one.
Blocking strictly-necessary cookies will prevent you from signing in or using the Service.
7. Changes
We may update this Cookie Policy as we add, remove or change the cookies we use. The "updated" date at the top of the page reflects the most recent change.
8. Contact
Questions about cookies: privacy@bakerly.co.uk.