Cookie Policy
Caloreel Ltd · Last updated 13 October 2026
In plain English
We don't use advertising or cross-site tracking cookies anywhere, and our website measures visits without cookies, which is why you won't see a cookie banner. The Caloreel app and client galleries use a small number of cookies that are needed to keep you signed in, unlock galleries and remember your basket. This page lists them.
1. What this policy covers
This policy explains how Caloreel Ltd ("Caloreel", "we", "us") uses cookies and similar technologies on:
- our marketing website;
- the Caloreel studio app, where photographers and their teams sign in;
- client-facing pages that photographers create with Caloreel, such as galleries, booking pages and the client portal.
It should be read with our Privacy Policy.
2. Cookies and similar technologies
A cookie is a small text file that a website stores on your device. Similar technologies, such as your browser's local storage, work in a comparable way, and this policy covers them too.
Under the Privacy and Electronic Communications Regulations 2003 (PECR), a website must ask for your consent before storing or reading this kind of information, unless an exemption applies. The main exemption is for storage that is strictly necessary to provide a service you've asked for, such as keeping you signed in or remembering what's in your basket. There are also narrow exemptions for some low-risk uses, such as remembering how you like a website to look, provided you're told about them and can object.
3. Our approach
- We do not use advertising cookies, retargeting pixels or cross-site tracking of any kind.
- Our marketing website measures visits with privacy-friendly analytics that don't set cookies or store anything on your device, and report only totals such as page views.
- The cookies we do use are strictly necessary, or are simple preferences you set yourself.
Because of this, we don't show a cookie consent banner. If we ever want to use cookies that need your consent, we'll ask first and update this policy.
4. Our marketing website
Our website doesn't set its own cookies unless you sign in. Cloudflare, our hosting and security provider, may set the following when its protection against automated traffic is active:
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
__cf_bm |
Helps tell people apart from bots, to protect the site from abuse | 30 minutes of inactivity | Strictly necessary |
cf_clearance |
Remembers that you passed a security check, so you aren't asked again | The period set in our security settings | Strictly necessary |
5. The Caloreel studio app
| Cookie or storage item | Purpose | Duration | Type |
|---|---|---|---|
tf.session_token (may be prefixed __Secure-) |
Keeps you signed in | Up to 30 days, renewed while you use Caloreel | Strictly necessary |
tf.session_data |
A short-lived, signed copy of your session so pages load quickly | 5 minutes | Strictly necessary |
Sign-in security cookies (names begin tf.) |
Protect the sign-in process, including Google sign-in, against forgery | Deleted once sign-in finishes | Strictly necessary |
tf_tenant |
Remembers which studio you're working in, if you belong to more than one | 1 year | Strictly necessary |
sidebar_state |
Remembers whether you collapsed the app sidebar | 7 days | Preference |
theme (local storage) |
Remembers whether you chose light or dark mode | Until you clear it | Preference |
The two preference items are only set when you change those settings. The app works normally without them, so you can object simply by blocking or clearing them in your browser.
6. Client galleries, booking pages and the client portal
These pages are run by the photographer you're working with, who is responsible for your data. Caloreel provides the technology, and the cookies below make the features you use work. Most other links, such as contracts, invoices and the client portal, use secure private links rather than cookies.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
Gallery access (names begin tf_gallery) |
Remembers that you've unlocked a password-protected gallery or confirmed your email on the gallery's guest list | Up to 30 days, or until the gallery expires | Strictly necessary |
Gallery visitor (names begin tf_visitor) |
Remembers the email address you entered, so your favourites, lists and comments are saved to you | Up to 12 months | Strictly necessary |
| Download PIN | Remembers that you entered the download PIN for this visit | Until you close your browser | Strictly necessary |
Basket (names begin tf_cart) |
Keeps the prints and products in your basket until you check out | Up to 30 days | Strictly necessary |
Exact cookie names can change as we update the product. Their purposes and durations won't change without us updating this policy.
7. Cookies set by other companies
- Payments. Card payments for invoices, store orders and Caloreel subscriptions are taken on Stripe's secure checkout pages. Stripe may set its own cookies there, for example to prevent fraud. These are covered by Stripe's own cookie policy.
- Google sign-in. If you sign in with Google, you do so on Google's pages, under Google's cookie policy.
8. Managing cookies
You can block or delete cookies in your browser settings. If you block strictly necessary cookies, some things won't work: you won't be able to stay signed in to Caloreel, unlock a protected gallery, save favourites or keep items in your basket.
9. Changes and contact
We'll update this policy if the cookies we use change, and show the new date at the top of the page. Questions? Email support@caloreel.com with "Privacy" in the subject line.
Questions about this policy? Email support@caloreel.com.