Cookies & browser storage
This page explains what this website stores in your browser, why we use it, and the choices you have. Last updated: 20 September 2026.
What we use
We use a small amount of browser storage so you can sign in, submit forms securely, and (unless you object) so we can remember simple display choices such as closing a notice or popup.
| Name | Type | Provider | Purpose | Duration | Your choices |
|---|---|---|---|---|---|
brf_session |
Cookie (this website) | Box Boiler Gym | Maintains your login session and helps protect website forms. | Usually lasts for your browser session. Some browsers can restore session cookies when you reopen the browser, so closing the browser does not always sign you out. You are signed out when you use Log out, or when the server session expires. | Required for signed-in booking and secure forms. Clear site cookies to remove it (you will be signed out). |
evp_phat_camp_dismissed |
sessionStorage (this website) | Box Boiler Gym | Remembers that you closed the event popup in the current browser tab. | Until you close the tab or end the browser session. Not sent to our servers. | Display preference (see below). Object on this page to stop us storing it, or clear this site’s data in your browser. |
brf_cookie_notice_dismissed |
localStorage (this website) | Box Boiler Gym | Remembers that you dismissed the cookie information notice. | Until you clear this site’s data. Not sent to our servers. | Display preference (see below). “Dismiss” only hides the notice — it is not consent to advertising or analytics tracking. |
brf_appearance_objected |
localStorage (this website) | Box Boiler Gym | Remembers that you objected to display-preference storage, so we do not set those preferences again. | Until you clear this site’s data or use “Allow display preferences” below. | Set only if you use the objection control on this page. |
Why we can use these
-
Session cookie (
brf_session): treated as strictly necessary to provide the online service you request (signing in, booking, and protecting forms). It does not require consent under UK PECR rules for that purpose. -
Display preferences (
evp_phat_camp_dismissed,brf_cookie_notice_dismissed): used solely to adapt how the site appears after a choice you make (closing a popup or notice). We rely on the ICO’s appearance exception for that purpose: we tell you about it here and offer a simple free way to object. If you object, we stop storing those preferences and the site still works (you may see the notice or popup again). -
Objection flag (
brf_appearance_objected): used only to remember your objection so we do not keep writing display preferences after you opt out.
Being first-party or non-advertising does not automatically make storage “essential”. We classify each item by its purpose, as above.
Display preferences — your choice
Objecting clears stored popup/notice preferences and stops new ones being saved. Allowing removes the objection flag so preferences can be remembered again when you dismiss a notice or popup.
Payments (Stripe)
When you buy a membership, pack, drop-in or event ticket, we send you to Stripe Checkout (a payment page hosted by Stripe) to enter your card details. We do not put Stripe’s payment form on our own pages. After you pay or cancel, Stripe returns you to our website.
While you are on Stripe’s website, Stripe may use its own cookies and similar technologies under Stripe’s rules. We do not list Stripe’s cookie names here. See Stripe’s Privacy Policy and Cookie Policy. Linking to Stripe does not remove our responsibility for how we use personal information on our own site — see our privacy notice.
Advertising and analytics
In the current website application code, we do not load advertising pixels, Google Analytics, Tag Manager, Meta/Facebook pixel, Hotjar, Clarity, or similar optional tracking scripts.
If we add non-exempt tracking in future, we will block it until we have valid consent, and provide clear ways to accept, reject and withdraw that consent. We will not turn such tracking on based only on dismissing this information notice.
We cannot guarantee from application code alone that a hosting or CDN layer never injects extra scripts. If you believe unexpected tracking is present, please contact us.
Clearing cookies and site data
You can remove this website’s cookies and storage in your browser settings (often under privacy, cookies, or “site data” for boxboilergym.co.uk). After clearing:
- you will usually be signed out;
- the cookie information notice may appear again;
- homepage event popups may appear again in a new tab;
- any display-preference objection flag will also be cleared unless you set it again on this page.
Browser clearing is useful, but it is not a substitute for the objection control above where that control applies.
Privacy notice
How we use personal information (accounts, bookings, payments and more) is explained in our privacy notice.
Questions: admin@boxboilergym.co.uk.
Last updated: 20 September 2026.