Cookie notice

1. The cookies we set

Across our website and app, the only cookies we set without asking are essential authentication cookies, created by our sign-in service when you sign in to your account.

These cookies keep you signed in as you move between pages, and they let our servers show you your own business’s information and nobody else’s. They are removed when you sign out, and they expire on their own after a period of inactivity.

2. Google Ads, with cookies only if you accept

Our public website pages load Google’s advertising tag (Google Ads), which tells us whether a visit from one of our ads led to an enquiry. Until you accept its cookie, the tag runs in Google’s consent mode with advertising storage switched off: it sets and reads no cookies, and removes ad click identifiers from what it sends. Google still receives a basic signal, without cookies, when a page loads or an enquiry is sent. Our signed-in app pages do not load the tag.

Our Climate Change Levy page (openlightenergy.co.uk/ccl) asks whether you accept a Google Ads cookie. If you accept, Google Ads sets conversion cookies on our domain (such as _gcl_au and _gcl_aw, kept for up to 90 days) and may read its own cookies on Google’s domains. We do not use them to show you personalised ads.

Your answer is kept in your browser’s local storage so that we do not ask again, and it applies on all our public pages. You can change it at any time with “Cookie settings” at the bottom of the CCL page; if you withdraw it, we remove the Google Ads cookies from our domain.

3. Visit statistics, without cookies

Our public website pages count visits with Vercel Web Analytics, provided by our hosting provider, Vercel. It sets no cookies and stores nothing in your browser. For each page view it records the page address (with any campaign details, but no other link details), the website you came from, your approximate location, and your browser, operating system and device type. It tells visits apart with a value derived from the request, which is discarded after 24 hours, so we see totals rather than individuals. Our signed-in app pages are not counted.

4. Campaign details, and nothing else

When you arrive through a link that carries campaign details (utm_source, utm_medium, utm_campaign) or a Google click identifier (gclid), we keep them in your browser’s session storage for that tab, and they are removed when you close it. If you send us a CCL enquiry, they are saved with it so that we know which campaign led to it.

Apart from the Google tag and the visit statistics above, our public pages load no other third-party scripts and embed no external content. Fonts are served from our own domain rather than a third-party service.

5. Managing cookies

You can remove cookies at any time through your browser settings. If you remove the authentication cookies, you are signed out and will need to sign in again. Blocking them entirely prevents sign-in, and with it the parts of Openlight that need an account.

6. Questions and changes

Our privacy policy explains how we handle information more broadly. Questions about this notice can be sent to hello@openlightenergy.co.uk. We may update this notice as our service develops; the date at the top shows when it last changed.