Cookie Policy
Last updated 9 October 2026
iCost only uses cookies and browser storage that are needed to sign you in, keep the service secure and provide features you ask for. We do not use advertising or analytics cookies, so we do not show a cookie banner. If that changes, we will ask for your consent first.
Cookies iCost sets
| Name | What it does | How long | Type |
|---|---|---|---|
icost_session | Keeps you signed in as you move between pages | Until 2 hours of inactivity | Strictly necessary |
XSRF-TOKEN | Protects forms against cross-site request forgery | Same as the session | Strictly necessary |
remember_web_… | Keeps you signed in on this device when you tick "Remember me" | 30 days | Strictly necessary (you ask for it) |
user_login_email, user_login_remember | Fills in your email address on the sign-in page when you tick "Remember me" | 30 days | Strictly necessary (you ask for it) |
Browser storage
| Name | What it does | When |
|---|---|---|
icost-chatbot-on, icost-chatbot-owner | Remembers that you opened the Costa assistant and makes sure one user never sees another user's chat on a shared computer | Only after you click the Costa button |
bp-webchat… | Your conversation with the Costa assistant, provided by Botpress | Only after you open Costa; cleared when another user signs in |
Third parties
- Cloudflare Turnstile checks that the sign-up form is used by a person, not a bot. It runs only on the sign-up page, for security.
- Stripe sets its own cookies on its secure payment pages (checkout.stripe.com and billing.stripe.com) to process payments and prevent fraud. See Stripe's cookie policy.
- Botpress (the Costa assistant) is not loaded until you click the Costa button.
Managing cookies
You can delete or block cookies in your browser settings. If you block the strictly necessary cookies above, you will not be able to sign in to iCost.
Questions: info@i-cost.co.uk. See also our Privacy Notice.