Effective 4 August 2026 · Last updated 11 September 2026
Effective date: 4 August 2026 Last updated: 11 September 2026
This policy explains how AllDone (operated by It’s All Done Ltd, company number 17245188, registered office Suite 530, 105 London Street, Reading, RG1 4QD) (“AllDone”, “we”, “us”) uses cookies and similar technologies on our marketing website (itsalldone.co.uk) and our application (app.itsalldone.co.uk). It should be read alongside our privacy policy.
Cookies are small text files placed on your device by a website. Some are essential for a service to work (for example, keeping you signed in); others are used for analytics or advertising. We also mention similar technologies here, such as browser session storage.
We keep this minimal by design:
Signing in is operated by our identity provider, Auth0. The following first-party cookies are set:
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
| __session | Keeps you signed in to the Platform. Encrypted session cookie. | Strictly necessary | Rolling: expires after 24 hours of inactivity, with an absolute maximum of 30 days. Separately, the application signs you out after 30 minutes of inactivity on screen. |
| __txn_ | Protects the sign-in handshake against forgery while a login is in progress. | Strictly necessary | 1 hour |
The application also uses browser session storage (not cookies, never sent to any server) for two things: remembering that you have dismissed the one-time onboarding tour, and a one-shot marker used to recover cleanly if a page asset fails to load after a deployment. Session storage is cleared when you close the tab.
The marketing website sets no cookies of its own. It uses HubSpot for two things: the analytics that tell us how the site is used, and the follow-up when you get in touch. HubSpot's tracking code loads only after you accept cookies in the banner shown on your first visit; until then, nothing is sent to HubSpot. Your choice is remembered in your browser's local storage (a single value, not a cookie, never sent to any server) and you can change it at any time using the "Cookie settings" link in the footer. If you accept, HubSpot sets the following cookies:
| Cookie | Purpose | Set by | Duration |
|---|---|---|---|
| __hstc | HubSpot visitor identification | HubSpot | 6 months |
| hubspotutk | HubSpot visitor identity for form submissions | HubSpot | 6 months |
| __hssc | HubSpot session tracking | HubSpot | 30 minutes |
| __hssrc | HubSpot session marker | HubSpot | Session |
These are set by HubSpot, Inc. under its own privacy policy (legal.hubspot.com/privacy-policy), and only when the contact page is used.
Both sites load two font families from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). Google Fonts does not set cookies, but your browser sends Google the standard information involved in any web request, including your IP address. See Google’s privacy policy for details.
You can control and delete cookies through your browser settings, including blocking some or all cookies. If you block the strictly necessary cookies listed in section 3, you will not be able to sign in to the application.
Guidance for common browsers:
For more information about cookies generally, see ico.org.uk or allaboutcookies.org.
We will update this policy if the cookies we use change, and the “Last updated” date above shows the current version. Questions: hello@itsalldone.co.uk.