GoNoGo Ratings and Reviews Ltd.
Effective date: 14 April 2026
GoNoGo Ratings and Reviews Ltd ("GoNoGo", "we", "us", "our"), a company registered in England and Wales (company number 16433454), operates the website at www.gonogo.co.uk (the "Site").
This Cookie Policy explains what cookies and similar technologies we use on the Site, why we use them, and the choices available to you. It forms part of our Privacy Policy, which sets out the broader legal basis on which we process your personal data.
We are committed to complying with the Privacy and Electronic Communications Regulations 2003 (PECR), as amended, and UK GDPR. The Information Commissioner's Office (ICO) is the supervisory authority for data protection in the United Kingdom.
Cookies are small text files placed on your device (computer, tablet or mobile) when you visit a website. They allow the website to recognise your device on subsequent visits and to remember certain information about you.
Similar technologies include browser-based storage mechanisms such as
localStorage and sessionStorage. Although these are not cookies in the
traditional sense, the ICO and PECR treat them in the same way because they can store information on your
device and retrieve it later. Wherever we refer to "cookies" in this policy, the term also covers these
similar technologies unless we indicate otherwise.
Cookies and similar technologies can be:
gonogo.co.uk domain.
Under PECR, we may only store information on your device, or access information stored on your device, if one of the following applies:
When you first visit the Site, a cookie banner asks whether you wish to accept or reject non-essential
cookies and similar technologies. Your choice is saved in localStorage under the key
gonogo_cookie_consent. You can change your mind at any time by clearing this item from your
browser's local storage (see Section 7 below).
Google Analytics (our only currently active analytics tool) is not loaded unless and until you click "Accept" in the cookie banner. If you click "Reject", or if you have not yet made a choice, no analytics cookies are set.
We organise the technologies we use into four categories: Strictly Necessary, Analytics, Functionality, and Authentication. The tables below provide the full details for each technology currently in use, plus technologies we will introduce when user account creation is enabled.
These technologies are essential for the Site to function and cannot be switched off. They do not require your consent under PECR. They do not identify you personally and are not used for advertising.
| Name | Provider | Purpose | Duration / Expiry | Type |
|---|---|---|---|---|
gonogo_cookie_consent |
GoNoGo (first-party) | Records your cookie consent choice ("accepted" or "rejected") so that the consent banner is not shown on every page visit and so that non-essential scripts are loaded (or suppressed) correctly. | Persistent until cleared by user or browser data reset | localStorage |
__vercel_live_token / __vercel_* |
Vercel Inc. (third-party — hosting provider) | Set by Vercel, our hosting infrastructure provider, to support deployment routing, edge network functions, and internal platform analytics. These cookies do not track your browsing across other websites and are not used for advertising. | Session or short-lived persistent (varies; typically up to 1 year) | Cookie |
Note on Vercel cookies: GoNoGo has no direct control over the specific cookies set by Vercel's hosting infrastructure. For the most up-to-date information, please refer to Vercel's Privacy Policy .
Analytics technologies help us understand how visitors use the Site — for example, which pages are most popular, how long people spend on the Site, and what devices and browsers are used. This information is used in aggregate and anonymised form to improve the Site. These technologies require your consent and are only loaded if you click "Accept" in the cookie banner.
| Name | Provider | Purpose | Duration / Expiry | Type |
|---|---|---|---|---|
_ga |
Google LLC (Google Analytics 4, measurement ID G-2C18K0YYXM) |
Registers a unique identifier used to generate statistical data on how you use the Site.
IP addresses are anonymised (anonymize_ip: true) before any data is sent to Google.
|
2 years from last activity | Cookie (first-party domain, Google analytics) |
_ga_2C18K0YYXM (and any other _ga_* variants) |
Google LLC (Google Analytics 4) |
Used by Google Analytics 4 to persist session state and throttle request rate. Works in
conjunction with _ga to attribute page views to user sessions.
IP anonymisation is enabled.
|
2 years from last activity | Cookie (first-party domain, Google analytics) |
Google Analytics data is processed by Google LLC, which may transfer data outside the UK under its standard contractual clauses. For more information, see Google's Privacy Policy and Google Analytics data safeguarding .
Functionality technologies remember choices you make to personalise your experience. While these do not track you for advertising, they store a preference on your device and we disclose them here in line with ICO guidance. Because they enhance usability without identifying you, we consider them strictly necessary for the service you have requested (i.e. the preference you actively set). However, we list them here for full transparency.
| Name | Provider | Purpose | Duration / Expiry | Type |
|---|---|---|---|---|
gonogo_theme |
GoNoGo (first-party) |
Stores your colour-scheme preference ("light" or "dark") so that your chosen theme is applied on
every page load without flicker. If absent, the Site falls back to your operating system's
preference via prefers-color-scheme.
|
Persistent until cleared by user or browser data reset | localStorage |
Authentication technologies are used to maintain secure sessions for logged-in users. They are strictly necessary for the delivery of authenticated areas of the Site and do not require consent. They are never used for tracking or advertising.
| Name | Provider | Purpose | Duration / Expiry | Type |
|---|---|---|---|---|
gonogo_adminUser |
GoNoGo (first-party) | Stores a JSON object containing session data for the GoNoGo admin area. Used to keep an authenticated administrator logged in across page navigation. Only set when a user logs into the admin portal. | Persistent until explicit sign-out or browser data reset | localStorage |
gonogo_adminLoginTime |
GoNoGo (first-party) | Records the Unix timestamp of the most recent admin portal login. Used to enforce session timeout policies and to detect stale sessions. | Persistent until explicit sign-out or browser data reset | localStorage |
gonogo_brandUser |
GoNoGo (first-party) | Stores a JSON object containing session data for the GoNoGo brand portal. Used to keep an authenticated brand account holder logged in across page navigation. Only set when a user logs into the brand portal. | Persistent until explicit sign-out or browser data reset | localStorage |
gonogo_brandLoginTime |
GoNoGo (first-party) | Records the Unix timestamp of the most recent brand portal login. Used to enforce session timeout policies and to detect stale sessions. | Persistent until explicit sign-out or browser data reset | localStorage |
gonogo_researchDates |
GoNoGo (first-party) | Stores research date override values applied in the admin portal. These are temporary configuration values used to adjust how research data is displayed during an admin session. | Persistent until cleared by admin sign-out or browser data reset | localStorage |
gonogo_brandOverrides |
GoNoGo (first-party) | Stores local brand data override values applied in the brand portal. These are temporary configuration values used to adjust how brand profile data is displayed during a session. | Persistent until cleared by brand sign-out or browser data reset | localStorage |
When public user account registration is introduced on the Site, we will use Supabase as our authentication and backend provider. The following technologies will be used at that time. This policy will be updated and the effective date revised when user accounts go live.
| Name | Provider | Purpose | Duration / Expiry | Type |
|---|---|---|---|---|
sb-<project>-auth-token (or equivalent Supabase auth key) |
Supabase Inc. / GoNoGo (first-party) | Stores a JSON Web Token (JWT) access token issued by Supabase Auth upon successful login. This token authenticates your requests to the GoNoGo API and to Supabase resources on your behalf. It contains a signed payload identifying your account but does not contain your password. | Short-lived (typically 1 hour); automatically refreshed using the refresh token while your session is active. | localStorage or Cookie (HttpOnly, depending on implementation) |
| Supabase refresh token (stored alongside access token) | Supabase Inc. / GoNoGo (first-party) | Used to obtain a new JWT access token without requiring you to log in again. Enables persistent "remember me" functionality by extending your authenticated session. | Up to 1 year if "remember me" is selected; session-length if not | localStorage or Cookie (HttpOnly, depending on implementation) |
| CSRF protection token | GoNoGo (first-party) | A Cross-Site Request Forgery (CSRF) protection token generated per-session and included in state-changing requests (such as form submissions). Prevents malicious third-party websites from submitting requests on your behalf without your knowledge. | Session (deleted when you close your browser tab) | Cookie (SameSite=Strict) or sessionStorage |
Supabase is headquartered in the United States. Data processed through Supabase infrastructure will be subject to appropriate safeguards under UK GDPR. For further information, please see Supabase's Privacy Policy .
We want to be clear about what our cookies and similar technologies are not used for:
Retention periods vary by technology and are set out in the tables in Section 4. In summary:
When you first visit the Site, a cookie banner gives you the option to Accept or Reject non-essential cookies and similar technologies. Clicking "Reject" means that Google Analytics will not be loaded and no analytics cookies will be set during your visit.
Your choice is stored in localStorage under the key
gonogo_cookie_consent. To change your preference, you can:
gonogo.co.uk (see Section 7.2), which will cause
the cookie banner to reappear on your next visit; or
https://www.gonogo.co.uk).
You can control and/or delete cookies and clear browser storage directly through your browser settings. Note that if you delete or block cookies, some parts of the Site may not work as intended. Instructions for common browsers:
To clear localStorage data specifically (which is separate from cookies):
https://www.gonogo.co.uk.In addition to using the cookie banner, you can prevent Google Analytics from collecting data about your visits to any website by installing the Google Analytics Opt-out Browser Add-on .
Some browsers transmit a "Do Not Track" (DNT) signal to websites. Because there is no agreed industry standard for how websites should respond to DNT signals, the Site does not currently alter its behaviour based on DNT. We rely instead on the explicit consent mechanism described in Section 7.1 above.
The Site may contain links to third-party websites. This Cookie Policy applies only to www.gonogo.co.uk. We have no control over, and are not responsible for, the cookies or privacy practices of any third-party website you visit via a link from our Site. We encourage you to review the cookie and privacy policies of any external website you visit.
We may update this Cookie Policy from time to time to reflect changes in the technologies we use, our business practices, or applicable legal requirements. When we make material changes, we will update the "Effective date" at the top of this page. We encourage you to review this policy periodically.
Where we introduce new non-essential cookies or similar technologies, we will seek fresh consent from you before those technologies are loaded. We will not expand the use of existing cookies beyond the purposes disclosed in this policy without first updating the policy and, where required, obtaining consent.
Some of the technologies described in this Cookie Policy may result in the processing of personal data (for example, IP addresses processed by Google Analytics, or authentication tokens that are associated with your user account). Such processing is governed by our Privacy Policy, which sets out:
This Cookie Policy should be read alongside the Privacy Policy. Together they provide a complete picture of how GoNoGo collects and uses information about you.
If you have any questions about this Cookie Policy, or wish to exercise any rights in relation to data processed through cookies or similar technologies, please contact us:
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):