Cookie Policy
Last updated: 17 July 2026
This policy explains what cookies are, which ones LodgeApp uses, and how you can control them. It applies to lodgeapp.co.uk, all lodge websites hosted on LodgeApp, and LodgeApp Charity at charity.lodgeapp.co.uk.
1. What are cookies?
Cookies are small text files that a website stores on your device through your browser. They allow websites to remember information about your visit, such as whether you are signed in, so you do not have to log in again every time you load a page.
2. Cookies we use
LodgeApp uses strictly necessary cookies and, where a lodge has enabled Google Analytics and you give consent, optional analytics cookies.
Strictly necessary
next-auth.session-token
Keeps you signed in to the lodge admin area. Without this cookie the admin cannot function.
__Secure-next-auth.session-token
Secure version of the session cookie used on HTTPS connections.
next-auth.csrf-token
Prevents cross-site request forgery attacks on sign-in forms.
charity_session
Keeps you signed in to your LodgeApp Charity fundraising account. Set only when you create an account or sign in at charity.lodgeapp.co.uk.
lodge_consent
Stores your cookie preference (accept or decline analytics). Set in your browser's localStorage, not as an HTTP cookie.
Session cookies are set only when you sign in to a lodge admin area or charity fundraising account. The consent record is stored locally in your browser.
Analytics (optional — with your consent)
Some lodge websites use Google Analytics 4 to understand how visitors use their site. This is entirely optional: you will be shown a consent banner before any analytics data is collected, and you can change your preference at any time using the cookie icon at the bottom-left of the page.
_ga
Google Analytics — distinguishes unique users. Set only if you accept analytics.
_ga_XXXXXXXX
Google Analytics — maintains session state for a specific GA4 property.
Analytics cookies are governed by Google's Privacy Policy. No analytics cookies are set if you decline or have not yet given consent. Not all lodge websites use Google Analytics — if a lodge has not enabled it, no analytics cookies will be set.
3. Third-party cookies
Stripe, our payment processor, may set its own cookies on pages where you make a payment or donation. These cookies help Stripe detect fraud and process your payment securely. They are governed by Stripe's Cookie Policy.
No other third-party cookies are set on LodgeApp websites, other than Google Analytics where you have given consent as described above.
4. How to control cookies
You can control or delete cookies through your browser settings. Most browsers allow you to:
- See which cookies are stored and delete individual ones
- Block cookies from specific websites
- Block all third-party cookies
- Clear all cookies when you close the browser
If you delete or block the LodgeApp session cookie, you will be signed out of the admin area and will need to sign in again. If you delete the charity_session cookie, you will be signed out of your LodgeApp Charity account.
Guidance on managing cookies in your browser is available from the Information Commissioner's Office at ico.org.uk/for-the-public/online/cookies.
5. Changes to this policy
We may update this policy from time to time. The most recent version will always be available on this page. You can also read our Privacy Policy for more information about how we handle your personal data.