Your choices

Cookie Policy

Essential technology keeps accounts, baskets and checkout secure. Optional analytics stays off unless you choose to allow it.

1. Cookies and similar storage

Cookies are small values a website asks your browser to store and return. Similar technologies include local and session storage. They can keep a service secure, remember a choice or help measure performance. UK rules apply to both cookies and similar device storage.

This policy covers storage used by Boony Ltd, trading as Boony Competitions. It should be read with our Privacy Policy .

2. Strictly necessary technology

Necessary cookies and storage are used without optional consent because the website cannot provide the service you request securely without them. They protect forms and accounts, maintain a sign-in session, hold a basket, complete checkout, remember consent choices and recover safely from a failed asset load.

You can block these in browser settings, but sign-in, basket, checkout, security and saved choices may stop working.

3. Optional analytics and performance monitoring

If you accept analytics, Google Tag Manager loads Google Analytics 4 so we can understand page journeys and measure actions such as viewing a competition, adding entries to a basket, starting checkout, registering and completing a purchase. Google Analytics can receive page and referring URLs, browser and device characteristics, a consented browser identifier, event details, order reference and transaction totals. We do not send names, email addresses, phone numbers, postal addresses or payment-card details.

We may also enable Sentry browser monitoring to understand page performance and diagnose application errors. It can receive a page path, browser and device characteristics, timings, error details and a pseudonymous network address. We configure it not to send default personal identity and scrub common contact, payment, authentication and query-string information.

Optional monitoring does not start before consent. Rejecting it does not reduce access to the website. If you withdraw consent, new optional monitoring stops on that browser.

4. Current cookies and browser storage

Name	Purpose	Type	Typical duration
boony-competitions-session	Maintains the secure session, sign-in, basket and checkout state.	Necessary cookie	Up to 2 hours of inactivity, or the configured signed-in session period.
XSRF-TOKEN	Helps prevent forged form and account requests.	Necessary cookie	Session duration, normally up to 2 hours of inactivity.
remember_web_*	Remembers a sign-in only when that account option is requested.	Necessary cookie	Until the remembered sign-in expires or you sign out.
boony:cookie-consent	Records the policy version, choice and date so we can respect it.	Necessary local storage	6 months, then we ask again; sooner if the policy changes.
boony:frontend-reload-attempted	Prevents a failed page asset from entering a reload loop.	Necessary session/local storage	Removed after a successful load.
_ga	Distinguishes a consented browser for Google Analytics reporting.	Optional analytics cookie	Up to 2 years.
_ga_*	Maintains Google Analytics session and campaign state for the configured measurement stream.	Optional analytics cookie	Up to 2 years.
Sentry browser storage and requests	Measures performance and reports scrubbed application errors when accepted.	Optional analytics	Event and diagnostic retention is controlled by our monitoring configuration and provider contract.

Cookie names can include a secure framework prefix and may vary where the site is deployed on a different domain. We will update this list before adding a new optional category or provider.

5. Your controls

On a first visit, choose “Accept analytics”, “Reject analytics” or “Customise”. Accept and reject are presented together and optional categories start off. Use “Cookie settings” in the footer at any time to change the choice. The new choice applies from then on; it does not undo processing that was lawful before withdrawal.