Cookie policy
Last updated 13 October 2026
The short version. We use a few strictly necessary cookies and similar technologies to keep Quidjob working and secure, such as keeping you signed in to the web app. These do not need your consent.
With your permission, and only then, we also use analytics cookies from Google and marketing cookies from Google and Meta on our website and in the web app. Nothing optional is set until you choose, rejecting is as easy as accepting, and you can change your mind at any time. The pages your customers open (quotes, invoices, payments and the rest) never use optional cookies.
What cookies and similar technologies are
A cookie is a small text file a website saves in your browser. Similar technologies, such as your browser’s local storage, do the same job in a different way. The law (the Privacy and Electronic Communications Regulations, PECR, alongside UK GDPR) treats them the same: a site may only store or read them with your consent, unless they are strictly necessary to provide the service you asked for.
In this policy “cookies” covers both. Where something is kept in local storage rather than as a cookie, the tables say so.
The kinds we use
- Strictly necessary. Needed for the site or app to work and stay secure: keeping you signed in, protecting against bots, remembering your cookie choice. Always on, because the service cannot work without them.
- Functional. Remember a choice you made, such as dark mode or the banking app you last paid with. They are part of the service you asked for, so they do not need consent either, and they are never used to track you.
- Analytics (optional). Count visits and show us which pages and features help, so we can improve them.
- Marketing (optional). Measure whether our adverts lead to sign-ups, and let us show our adverts to people likely to find Quidjob useful.
We do not sell personal data or use cookies to build profiles for anyone else’s advertising.
Our website, quidjob.co.uk
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
qj-cookie-consent (local storage) | Quidjob | Remembers your cookie choice: which kinds you allowed, when, and the version of this policy | Strictly necessary | 12 months, then we ask again |
__cf_bm | Cloudflare | Tells people from automated bots, to protect the site. Set only when Cloudflare’s bot protection is active | Strictly necessary | 30 minutes |
cf_clearance | Cloudflare | Remembers that you passed a security check, if Cloudflare showed you one | Strictly necessary | 30 minutes by default |
With your consent, the website also uses the optional cookies listed under Optional cookies.
The web app, app.quidjob.co.uk
The web app keeps what it needs in your browser’s local storage, not in cookies. Our servers (api.quidjob.co.uk) set no cookies: the app sends your sign-in as a header with each request.
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
FlutterSecureStorage.auth.tokens (local storage) | Quidjob | Your sign-in tokens, encrypted, so you stay signed in | Strictly necessary | Until you sign out |
FlutterSecureStorage (local storage) | Quidjob | A random key, made in your browser, that encrypts the sign-in tokens | Strictly necessary | Until you clear site data |
flutter.appContext.snapshot (local storage) | Quidjob | A copy of your account details, such as your business name and plan, so the app opens quickly | Strictly necessary | Until you sign out |
flutter.sync.queue, flutter.sync.cursor (local storage) | Quidjob | Changes you made without a connection, waiting to send, and how far the last sync got | Strictly necessary | Until they sync, or you sign out |
flutter.introSeen, flutter.setupDone (local storage) | Quidjob | Whether you have seen the intro and set up your business, so the app opens in the right place | Strictly necessary | Until you clear site data |
flutter.consent.cookies (local storage) | Quidjob | Remembers your cookie choice, when, and the version of this policy | Strictly necessary | 12 months, then we ask again |
flutter.themeMode (local storage) | Quidjob | The appearance you picked: light, dark or automatic | Functional | Until you change it or clear site data |
__cf_bm | Cloudflare | Bot protection, as on the website | Strictly necessary | 30 minutes |
With your consent, the web app also uses the optional cookies under Optional cookies, on the sign-in screens and once you are signed in. It sends one event, when you finish creating an account, so we can tell which adverts lead to sign-ups.
When you pay for your subscription by card, you go to Stripe’s checkout page, which sets its own strictly necessary cookies to prevent fraud. See Stripe’s cookie policy.
Pages your customers open
Quotes, invoices, payment pages, statements, bookings, certificates and review pages open in the browser without signing in. They never load analytics or marketing tags, whatever anyone has chosen elsewhere, and they only show a short notice about essential cookies.
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
flutter.pages.rememberedBank (local storage) | Quidjob | The banking app you last chose to pay with, so it is first in the list next time | Functional | Until you clear site data |
flutter.consent.cookies (local storage) | Quidjob | Remembers that you have seen the cookie notice | Strictly necessary | 12 months |
__cf_bm | Cloudflare | Bot protection | Strictly necessary | 30 minutes |
Optional cookies (only with your consent)
These are set only after you choose “Accept all”, or switch the kind on under “Choose”. Until then the tags that set them are not loaded at all. We use Google Consent Mode, which passes your choice to Google’s tags.
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
_ga | Google (Google Analytics, loaded through Google Tag Manager) | Tells one visitor from another, to count visits | Analytics | 2 years |
_ga_* | Google (Google Analytics) | Keeps track of the current visit | Analytics | 2 years |
_gcl_au | Google (Google Ads) | Links a click on one of our Google adverts to a later sign-up | Marketing | 90 days |
_fbp | Meta (Meta Pixel) | Identifies your browser to measure our Meta adverts and to show them to people like our customers | Marketing | 90 days |
_fbc | Meta (Meta Pixel) | Keeps the click identifier when you arrive from one of our Meta adverts | Marketing | 90 days |
Google and Meta may also set cookies on their own domains (such as google.com and facebook.com) if you are signed in to them or have visited them. Those are controlled by them: see Google’s and Meta’s cookie policies.
What these tags collect: an online identifier for your browser, the pages you visit and links you click on our site, the sign-up event in the web app, your device and browser type, an approximate location from your IP address, and the advert you came from. We keep Google Analytics data for no longer than 14 months. Meta collects the Pixel data jointly with us and then uses it under its own privacy policy.
Sending data abroad
Google and Meta are based in the United States, so optional cookie data goes there. Both are certified under the UK Extension to the EU–US Data Privacy Framework (the UK–US “data bridge”), which UK law treats as adequate. Where that does not apply, we rely on the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.
Changing your choice
You can change or withdraw your consent at any time, as easily as you gave it:
- On the website, choose Cookie settings at the foot of any page.
- In the web app, go to Settings and choose Cookie settings.
When you withdraw consent, we stop the optional tags straight away and delete the cookies they set on our own domain. Cookies on Google’s or Meta’s own domains can be cleared in your browser, as below. We ask again after 12 months, or sooner if we change the optional cookies we use.
Clearing cookies and site data
Every browser lets you see and delete cookies and the data sites keep, and block them in future: Chrome, Safari on Mac, Safari on iPhone, Firefox and Edge.
Clearing site data for app.quidjob.co.uk signs you out of the web app and drops any changes that have not synced yet, so let them sync first. Blocking strictly necessary items may stop Quidjob working.
The iPhone app
The iPhone app does not use cookies. It keeps your sign-in in the iPhone’s keychain and your settings on the device, for the same strictly necessary and functional reasons as the web app.
Quidjob staff tools
Our internal admin tools, used only by Quidjob staff, sit behind Cloudflare Access, which sets a CF_Authorization cookie to keep staff signed in. It is strictly necessary and never set for customers.
Changes and contact
If we change the cookies we use, we will update this policy and its date, and ask you again before setting any new optional cookie. For anything about cookies or your data, email hello@quidjob.co.uk. Our privacy policy explains how we handle personal data generally, and your right to complain to the Information Commissioner’s Office.