This document is published in English. Translations for other markets will be published once legally reviewed.
1. Scope
This Policy explains how MyPA Limited uses cookies and similar technologies on MyPA websites, web apps, mobile apps and partner-branded versions of MyPA. It supplements the Privacy Policy.
2. What these technologies are
A cookie is a small text file stored by your browser. Similar technologies include local and session storage, software development kits (SDKs), pixels, tags, device identifiers and cached tokens. We call them all "cookies" in this Policy.
3. Our approach
- Strictly necessary cookies are used without consent where the law allows, because the service cannot work without them.
- Optional cookies (functional, analytics or advertising) are not set until you choose to allow them where consent is required.
- Rejecting optional cookies is as easy as accepting them. Continuing to browse is not consent.
- Cookie consent, operating-system permissions and MyPA Insights enrolment are separate choices.
- We do not use common third-party behavioural advertising pixels on the core MyPA Service. If that changes, we will update this Policy and ask for consent first.
- Advertisers and Insights customers cannot read your conversations or connected-account content through any cookie, pixel or SDK.
4. Categories
| Category | Purpose | Consent needed? |
|---|---|---|
| Strictly necessary | Login, session security, fraud prevention, load balancing, remembering privacy choices, checkout state | No |
| Payment | Trust Payments' secure payment fields and 3-D Secure authentication set cookies required to process and secure your payment and prevent fraud | No (necessary for a payment you request) |
| Functional | Language, accessibility, interface preferences | Yes, where required |
| Performance / analytics | Reliability, crash reports, aggregate usage measurement | Yes, where required |
| Advertising / measurement | Sponsored-content measurement and attribution, if introduced | Yes |
| Third-party transaction | Identity verification, booking, merchant checkout or authentication components you open | Set by the third party under its policy |
| Insights administration | Records your MyPA Insights choice, consent version and withdrawal | No (necessary to honour your choice) |
5. Third-party technologies
When you use a third-party component through MyPA, such as Trust Payments' checkout, an identity provider, a booking site or an app-store service, that third party may set its own cookies under its own policy. We limit embedded components to the functionality required.
On the MyPA website, performance and analytics cookies come from Microsoft Clarity, which helps us understand how the site is used. It loads only after you choose "Accept all", and sets cookies such as _clck (kept for up to one year) and _clsk (one day). Choosing "Reject optional" in Cookie settings stops it and deletes those cookies.
6. Apps
Native apps mainly use app storage and operating-system security features rather than browser cookies. SDKs may be used for authentication, security, crash reporting, payments and identity checks. Optional SDK functions remain subject to your permissions.
7. Privacy Shield and VPN
Privacy Shield runs on your device to block trackers and malicious domains. The VPN processes limited connection information to route traffic and does not keep a log of sites you visit. VPN-derived data is never used for MyPA Insights or advertising on Apple platforms, and equivalent restrictions apply elsewhere where required.
8. Apple platforms
No AI Tokens are given for enabling App Tracking Transparency or other system permissions. If any MyPA feature constituted tracking under Apple's rules, we would request App Tracking Transparency permission first. We do not use installed-app information for advertising or Insights.
9. Managing your choices
Use the cookie settings link in the website footer, or Settings > Privacy in the app, to change your choices at any time. You can also block cookies in your browser, but blocking strictly necessary cookies may stop login, security or checkout working.
10. Privacy signals
We honour Global Privacy Control and similar opt-out signals where required by law.
11. Retention
Session cookies expire when your session ends. Persistent cookies last no longer than necessary (typically up to 13 months for consent records). Current cookie names, providers and durations are shown in the cookie settings panel.
12. Japan
For users in Japan, the Japan Country Schedule (Part D – External Transmission Notice) applies in addition to this Policy. The Japan Country Schedule will be published before MyPA launches in Japan.
13. Contact
dpo@mypa.today. MyPA Limited, VG, Floor 5, 37 Esplanade, St Helier, Jersey, JE1 2TR, Channel Islands.