Cookie Policy
Last updated: 21 October 2026
1. Introduction#
This cookie policy explains how Infra-Backer Limited ("we", "us", "our"), uses cookies and similar technologies when you visit and interact with the Infra-Backer platform ("Platform"). It explains what these technologies are, why we use them, and your rights to control our use of them.
This cookie policy should be read alongside our Privacy Policy and Terms of Use, which are available on the Platform.
2. What Are Cookies?#
Cookies are small text files that are placed on your computer or device by websites that you visit. They are widely used to make websites work, or work more efficiently, as well as to provide information to the owners of the site.
Our Platform uses only cookies and similar technologies that are strictly necessary to provide it or the feature you are using, that remember choices you make about how the Platform looks and works, or that are otherwise permitted without consent under the Privacy and Electronic Communications Regulations. We do not use advertising cookies, we do not set analytics cookies of our own, and we do not use cookies to track you across other websites. The one exception is our map provider, Mapbox, which stores a usage identifier in your browser: we ask for your consent before any map loads (section 4.2).
Most web browsers allow some control of cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set, visit www.aboutcookies.org or www.allaboutcookies.org.
3. Essential and Preference Cookies#
Essential cookies are strictly necessary for the Platform to function. They enable core functionality such as security, session management, and authentication. The Platform cannot function properly without these cookies, and they cannot be disabled.
| Provider | Cookie | Purpose | Expiry | Type |
|---|---|---|---|---|
| Flask | session | Manages your authenticated session on the Platform. It securely holds your login state, a per-device session token, and the CSRF security token used to protect against Cross-Site Request Forgery (CSRF) attacks. | Until you close your browser; once you sign in, 12 hours after your last visit | Essential |
| Sign-in security | ib_did | A random identifier for your browser, set when you sign in, so we can email you when your account is signed in to from a device we have not seen before. | 400 days | Essential |
Preferences
The Platform also remembers some choices you make about how it looks and works, such as your display theme, whether the sidebar is open, how lists are displayed and which table columns are hidden. These are stored in your browser and are not used for any other purpose.
| Provider | Cookie | Purpose | Expiry | Type |
|---|---|---|---|---|
| Infra-Backer | ib-view-organisationsDirectory | Remembers the view you chose for the organisations directory. | 90 days | Preferences |
| Infra-Backer | phoenixTheme (local storage) | Remembers your display theme. | Until cleared | Preferences |
| Infra-Backer | infraBacker.sidebar.rail (local storage) | Remembers whether the sidebar is open or collapsed. | Until cleared | Preferences |
| Infra-Backer | ib-view-<list> (local storage) | Remembers whether each list is shown as a list or as cards. | Until cleared | Preferences |
| Infra-Backer | ib_cols_hidden:<list> (local storage) | Remembers which table columns you have hidden in each list. | Until cleared | Preferences |
| Infra-Backer | em_view (local storage) | Remembers the view you chose in the Engagement Manager. | Until cleared | Preferences |
| Infra-Backer | ib_map_layers:<page>:<section> (local storage) | Remembers which layers you have switched on in each map's Layers panel. | Until cleared | Preferences |
Bot protection. Our pre-registration, sign-up and contact forms, and the security check our map features may show when an account's usage passes a set limit, use Cloudflare Turnstile to check that submissions are made by a person. Turnstile runs in a Cloudflare frame within the form and processes technical signals, such as your IP address and browser information, that are strictly necessary for this security check. See our Privacy Policy for more information.
Cloudflare, which protects the Platform, may also set the following cookies to distinguish people from automated bots, including to protect the Platform against unauthorised scraping.
| Provider | Cookie | Purpose | Expiry | Type |
|---|---|---|---|---|
| Cloudflare | __cf_bm | Identifies and manages automated bot traffic. | 30 minutes | Essential |
| Cloudflare | cf_clearance | Records that you have passed a security challenge, so you are not challenged again. Only set if you are shown a challenge. | 1 year | Essential |
4. Third-Party Services#
Some of the services we rely on to provide the Platform process information from your browser or store data in it. We describe each below, together with why we use it.
4.1 Analytics
We measure how the Platform is used with Cloudflare Web Analytics. It does not set cookies, does not store anything on your device and does not track you across other websites. It counts page views from the technical information your browser sends with each request, such as the page address, the referring site, your browser type and your country. See our Privacy Policy for more information.
4.2 Mapping
The Platform uses Mapbox to draw its maps, for signed-in users: the Infra-Maps pages, the project map on your dashboard, and the location maps on project and service-request pages and in the project form. No map loads until you choose "Show maps", which records your consent; you can withdraw it at any time in Settings, under Privacy, which also clears what Mapbox stored in the browser you withdraw it from. Mapbox's map software stores data in your browser's local storage under keys beginning "mapbox.eventData", including a randomly generated identifier that is sent to Mapbox with usage events so that Mapbox can calculate aggregate usage statistics for its service. Mapbox states that it does not use this data for advertising, to track you, or to build profiles of individual users. Your browser may also cache map tiles so that maps load faster.
| Provider | Cookie | Purpose | Expiry | Type |
|---|---|---|---|---|
| Mapbox | mapbox.eventData (local storage) | Random identifier and usage-event information used by Mapbox to calculate aggregate usage statistics for its mapping service. | Until cleared | Functional (with your consent) |
You can also delete this data by clearing site data for the Platform in your browser; while your consent stands, a new identifier is created the next time a map loads.
4.3 Payments
The Platform uses Stripe to process payments for subscriptions, broker fees and other paid features. Stripe may set cookies to support fraud detection and payment security. Stripe sets these cookies only on the pages where you make a payment.
| Provider | Cookie | Purpose | Expiry | Type |
|---|---|---|---|---|
| Stripe | __stripe_mid / __stripe_sid | Used for fraud prevention, payment processing, and to manage secure payment sessions. | 1 year / 30 min | Essential* |
* Stripe’s fraud detection cookies are classified as essential as they are necessary for secure payment processing.
5. How to Manage Cookies#
You can control cookies through your browser settings. Most browsers allow you to:
- View what cookies are stored and delete them individually.
- Block third-party cookies.
- Block all cookies.
- Delete all cookies when you close your browser.
- Clear site data, including local storage, for the Platform.
Please note that if you block or delete essential cookies, the Platform may not function correctly. You may be unable to log in, and certain features may be unavailable.
6. Changes to This Cookie Policy#
We may update this cookie policy from time to time to reflect changes in the cookies we use or for other operational, legal, or regulatory reasons. We encourage you to review this policy periodically to stay informed about how we use cookies.
7. Contact Us#
If you have any questions about our use of cookies, please contact us.