← Back to ITS (In The Shot)

Cookie Policy

[Resonate Studios] · Last updated: 04 November 2026
PECR UK GDPR Google AdSense
In plain English: we use a small number of cookies to keep you logged in and remember your settings. We also use Google AdSense, which sets its own advertising cookies — you can turn those off in your Google Ads Settings. Nothing that isn't strictly necessary runs until you consent.

1. What cookies are

Cookies are small text files placed on your device when you visit a website. They are widely used to make sites work, remember preferences, and measure usage. Some cookies are set by us (first-party); others are set by services we use (third-party).

We also use localStorage and sessionStorage — browser storage that works like a cookie but stays on your device and is not sent to our server with every request. See Section 6.

2. The four categories

CategoryWhat it doesConsent?
Strictly necessary Keeps you logged in, protects against CSRF attacks, and remembers your cookie choice. The site cannot work without these. Not required (PECR exemption)
Functional Remembers preferences such as your background-video choice, volume, and QR-toggle mode. Not required (these are set only in response to your action)
Analytics Helps us understand which pages and tracks are used, so we can improve them. Aggregated; no advertising use. Required
Advertising Google AdSense personalisation and frequency capping. Set by Google, not us. Required

3. Our first-party cookies

These are set directly by www.jaysoftware.co.uk. Duration and purpose are as stated.

NameCategoryPurposeDuration
PHPSESSID Necessary Session identifier. Keeps you logged in and holds CSRF tokens. Session (browser close)
its_csrf Necessary CSRF protection token for forms (upload, delete, admin actions). Session
its_cookie_consent Necessary Remembers which cookie categories you have accepted, so we don't ask every visit. 12 months
its_remember Necessary "Remember me" login token (if you tick the box). Hashed server-side. 30 days
bgvh_video_pref Functional Remembers whether you turned the background video on/off. Stored in localStorage, mirrored here for server-side rendering. 12 months
qto_cta_* Functional Remembers your QR-toggle CTA text and save preference (per instance UID). Stored in localStorage, mirrored here. 12 months
its_volume Functional Remembers your player volume across tracks. 12 months
Verify before publishing. The rows above match the features described in your platform spec. Open DevTools on each key page (index.php, player.php, bg_video_admin.php, library_player.php) and delete any row that isn't actually set, and add any that are.

4. Third-party cookies

These are set by services we use. We do not control them; their own policies apply.

ProviderCookie(s)CategoryPurposePolicy
Google AdSense __gads, __gpi, __eoi, IDE, test_cookie Advertising Ad delivery, frequency capping, personalisation, fraud prevention. Google Ads
Google Analytics (if enabled) _ga, _ga_*, _gid Analytics Aggregated visit and behaviour statistics. IP anonymised. Google Privacy
PayPal cookie_check, enforce_paypal, x-pp-s Necessary Fraud prevention and checkout session integrity on the PayPal domain. PayPal Privacy
YouTube (if a video is embedded) VISITOR_INFO1_LIVE, YSC, PREF Functional Embedded video playback on live.php and share pages. Google Privacy
If you don't run Google Analytics, delete that row. Listing _ga when you don't set it is as much a PECR problem as omitting cookies you do set. Only list what you use.

5. Google AdSense cookies

Required AdSense disclosure. This section is the disclosure Google requires on every site showing AdSense ads. Do not remove it while ads are live.

Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to our site and/or other sites on the Internet.

6. localStorage & sessionStorage

These are browser storage mechanisms, not cookies. They stay on your device and are not transmitted with every request, but they are still covered by PECR. We use them for:

KeyStoragePurpose
bgvh_video_preflocalStorageYour background-video on/off choice.
qto_save_<uid>localStorageQR-toggle CTA save preference per instance.
qto_pos_<uid>sessionStoragePosition of a dragged QR-toggle window (per tab).
its_cookie_consent_v1localStorageMirror of the cookie-consent cookie, used to gate AdSense load.

You can clear these via your browser's "Clear site data" option. Doing so will reset your preferences but will not delete your account.

7. Managing cookies

You can control cookies through your browser:

Blocking strictly necessary cookies will break login, checkout, and playback. Blocking advertising cookies is supported and won't break the site.

9. Changes to this policy

We may update this policy when we add or remove cookies. The “Last updated” date shows when. Material changes will be announced via the cookie banner. Continued use after the effective date means you accept the updated policy.

10. Contact

Questions about cookies or this policy:
Email: privacy@jaysoftware.co.uk
See also: Privacy Policy · Terms & Conditions