Cookies
Last Updated: 21 August 2026
This page explains the cookies and similar technologies used by Deuce Creative Limited (trading as Grofomo) across grofomo.com, our ticket pages on grfm.to, and the Grofomo app. It sits alongside our Privacy Policy.
The short version: almost everything we set is needed to make the site work, and we do not use cookies to build a profile of you or to advertise to you. There is one exception, and you are asked about it before it runs.
Essential cookies
These are needed to provide a service you asked for, so they do not require your consent. Blocking them will break sign-in, checkout, or both.
| Name | Set by | What it does | Lasts |
|---|---|---|---|
| sb-*-auth-token | Grofomo (via Supabase) | Keeps you signed in and carries your session between grofomo.com subdomains. Without it you would be signed out on every page. | Until you sign out, refreshed as you browse |
| active_org | Grofomo | Remembers which organisation console you were last working in, so we can take you back there. | 30 days |
| last_login_method | Grofomo | Remembers how you signed in last time, so the login page can show a "last used" hint. It holds the method only, never your identity. | 1 year |
| gfm_attr | Grofomo | Remembers which link brought you to a ticket page, so that an affiliate or ambassador who referred you is credited for the sale. It stores the campaign tag and referral code, not who you are. | 30 days |
| cf_* (Turnstile) | Cloudflare | Confirms that a form submission comes from a person rather than an automated script. Protects sign-up, pre-sale registration, and ticket lookup from abuse. | Session |
| gfm_consent | Grofomo | Records the choice you made in the cookie banner, so we do not ask again and so we honour it. Ironically the one cookie we cannot ask permission for. | 6 months |
Measurement cookies, which we ask about first
Event organisers can connect their own Meta advertising account to their ticket page, so they can tell which of their adverts sold tickets. Where an organiser has done that, and only where you agree, the Meta Pixel loads and sets the cookies below.
| Name | Set by | What it does | Lasts |
|---|---|---|---|
| _fbp, _fbc | Meta | Set by the Meta Pixel where the event organiser has added one, so that organiser can measure which of their adverts led to ticket sales, and reach similar audiences. Meta receives your IP address and the pages you viewed on the ticket page. | Up to 90 days |
These do not run unless you accept them, and you are asked before they load. A banner appears on the ticket page itself, with Accept and Decline. Nothing is set until you choose, and if you decline, nothing is set at all. Declining does not limit anything you can do on the site, and you can still buy a ticket exactly as normal. Where these run, the organiser whose event you are looking at is the controller for that measurement and Meta is their provider, not ours. We list this on our subprocessors page under services a customer switches on.
Changing your mind
You can change your choice here, and it takes effect immediately:
The same choice can be changed from the “Cookie settings” link in the footer of any ticket page.
You can also clear cookies in your browser, or block them entirely through your browser settings, though blocking essential cookies will stop sign-in and checkout working.
Other technologies
Local storage. Ticket pages store a small marker in your browser after a purchase, so that refreshing the confirmation page does not report the same purchase twice. It contains an order reference and nothing else, and is cleared when you close the tab.
The Grofomo app. The mobile app does not use cookies. It stores a randomly generated device identifier and your preferences on the device itself, as described in the Privacy Policy. It contains no advertising identifier and no cross-app tracking.
Content loaded from other companies. Some pages load fonts from Google, and the site-map editor loads Google Maps. These do not set cookies for us, but the company hosting them receives your IP address and browser details as part of serving the request, which is unavoidable for any content loaded from another domain.
Questions
Email privacy@grofomo.com. You can also complain to the Information Commissioner’s Office at ico.org.uk.