Cookie Policy
Cookies are used to make this website work and for us to track usage of certain pages and features. This policy explains what they are, what they are for and how you can control them. We may update this policy at times and you can always find an up to date copy by visiting this page. This policy that you are reading now is effective 1 December 2021.
What are cookies?
Cookies are small text files which a website may put on your computer or mobile device when you first visit a site or page. A cookie will help the website, or another website, to recognise your device the next time you visit. Web beacons or other similar files can also do the same thing. We use the term "cookies" in this policy to refer to all files that collect information in this way. If we didn't use cookies then we wouldn't be able to remember who you are as you navigate through and use our service.
What sort of cookies does this website use?
Internally, we categorise these in four ways:
Essential Cookies
These cookies enable you use all the different parts of the site and without them we cannot provide you with a service.
Some examples of how we use these cookies are:
- Signing in to your account securely.
- Remembering the preferences you set on this page.
- Carrying our requests initiated by you.
- Detecting and preventing fraud.
| Cookie Name | Purpose | Duration |
|---|---|---|
| SessionID |
Used to maintain a user state on the client. i.e. This cookie allows us to know whether you are logged in or not on the browser. |
Session |
| VisitID |
Used to store information about your visit and is used for audit / logging purposes. |
Session |
| __FIRST_LOGIN__ |
Used to identify if this was your first login on the browser |
Session |
| __RETURN_URL__ |
Stores the originally requested URL to redirect users back to their intended page after successful login. |
Session |
| __INVITATION_TOKEN__ |
Used when a user logs in via an invitation. Stores an encrypted invitation ID. |
Session |
| rg-checkout-accessToken |
Used to maintain a user state on the client. i.e. This cookie allows us to know whether you are logged in or not on the browser. |
Session |
| cookie_consent_status |
Used to track whether you have given consent to our cookie policy |
6 months |
| cookie_preferences |
Used to track the preferences of the cookies you've chosen (Analytics, Essential etc) |
6 months |
| d_f_i |
Used as a device indicator within the Security Centre to uniquely identify your device through fingerprinting and protect your account. Not used for analytics. |
13 months |
| s_g_i |
Used as a device indicator within the Security Centre. Does not use fingerprinting, instead random cookie generation is used to track devices. This helps us protect your account and is not used for analytics. |
13 months |
| d_f_a_t |
A security cookie that tracks the last activity time on the Reward Manager/Admin Portal to enable automatic logout after inactivity. |
10 minutes |
| d_f_u_t |
Temporarily delays repeated unblock account email requests for 5 minutes to prevent spam or abuse. Not used for analytics. |
5 minutes |
| ckCsrfToken |
A security cookie used to protect forms from Cross-Site Request Forgery attacks by verifying the request origin. |
Session |
| PersistentID |
Essential for keeping users logged in for up to 90 days when the “Remember me” option is selected during login. |
90 days |
| mCardId |
Enables users to retrieve an eCard after login if they visited the site without authentication. |
1 day |
| AlertId |
Checks if a user has postponed the prompt for subscribing to notifications. |
30 days |
| socialData |
Stores internal functional data related to the authentication method used. |
Session |
| sSocialLogin |
Saves the initial internal endpoint via the “socialData” cookie during social login. |
Session |
| member_profile_onboarding |
Determines if it’s the user’s first time visiting their profile to display visibility setting prompts (legacy profile only). |
Session |
Essential Cookies - Cashback
These cookies are set only when you click to redeem a cashback offer. You will be notified before they are stored on your device. Cashback tracking requires these cookies to function correctly.
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
| Various |
Reward Gateway uses affiliate networks to enable Cashback to be tracked from retailers. These affiliate networks might place a cookie when you visit a retailer in order to award the Cashback to you. The cookie is placed when you make use of a Cashback offer. The retailers that you visit may also place their own cookies on your device when you transact with them. Reward Gateway does not control the placement or usage of data derived by retailers or affiliate networks using cookies. You can learn more about how this information is held in their Privacy Notices. We do not use third-party advertising on this website, nor do we use cookies for things like behavioural targeting. |
Various |
Essential Cookies - Support
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
| Zendesk | __zlcmid |
Zendesk provides our Live Chat support functionality throughout the site. Cookies are required for this functionality to work. These cookies will only be placed on your device if you request support through the Chat functionality. You can read more detail about Zendesks use of Cookies for the 'Web Widget' on their Cookie Policy: |
1 year |
Essential Cookies - Admin
| Cookie Name | Purpose | Duration |
|---|---|---|
| __RG_MANAGE_REDIRECT_URI__ |
Used to securely redirect admin users |
1 year |
| searchByLocale |
A functional cookie used to filter and search available schemes by locale. |
600 days |
| iRegion |
Filters available schemes based on the user selected region. |
600 days |
| proxy_origin |
Works with “proxy_origin” to redirect users between our system and third-party services, maintaining session continuity. |
Session |
| proxy_destination |
Complements “proxy_destination” for transferring users between systems while preserving their original session path. |
Session |
Analytics Tracking Cookies
| Provider | Cookie Name | Duration | Purpose |
|---|---|---|---|
| Google Analytics |
__ga _gid _gat |
13 months 24 hours 1 minute |
Google Analytics is used on this site, and in some of our mobile apps, to help us understand how the site is used. It uses a set of cookies to collect information and report website usage statistics without personally identifying you to Google. Read more |
| Heap |
_hp2_id.APP_ID _hp2_ses_props.APP_ID _hp2_props.APP_ID _hp2_hld. _hp5_meta.APP_ID _hp5_event_props.APP_ID userty.core.s.app_id_hash _cs_c _cs_id |
13 months 30 minutes 13 months Should not persist 13 months 13 months Current session 13 months 13 months |
Heap is used on this site, and in some of our mobile apps, to help us understand how the site is used. It uses a set of cookies to collect information and report website usage statistics and to help us understand where there are usability issues. Read more |
| Piano |
_pcid _pctx _pprv pa_user |
13 months 13 minutes 13 months 13 months |
Piano is used on this site, and in some of our mobile apps, to help us understand how the site is used. It uses a set of cookies to collect information and report website usage statistics and to help us understand where there are usability issues. Read more |
| New Relic | JSESSIONID | Session |
New Relic is used on this site and allows us to perform statistical measurements of the website’s speed. New Relic receives the information on what pages are accessed and the time it took to load. As part of this reporting, New Relic may get and store your IP address. The purpose and scope of the data collection, as well as information about how New Relic processes and uses this data can be found in New Relic's Privacy Policy. Read more |
| Braze |
ab.storage.userId.API_KEY ab.storage.sessionId.API_KEY ab.storage.deviceId.API_KEY ab.optOut ab._gd |
400 days 400 days 400 days 400 days 400 days |
Braze is used on this site, and in some of our mobile apps, to help us understand how the site is used. It uses a set of cookies to collect information and report website usage statistics and to help us understand where there are usability issues. Read more |
Can a website user block cookies?
Using the options above you can disable certain types of cookies that we use. If you want to learn more about cookies and how to disable specific ones, then you can find information on www.allaboutcookies.org. Completely disabling cookies will prevent this website from working properly. If you do not wish to allow us to use cookies then we recommend that you do not use this website at all.
Do we track whether users open our emails?
Our emails often contain a single, email-unique "pixel" to tell us whether you have opened the emails, and we can identify which links have been followed. We use this information so that we can understand what content is interesting to our users. The pixel will be deleted when you delete the email. If you do not wish the pixel to be downloaded to your device at all, please unsubscribe from our email communications.
More Information
More detail on how businesses use cookies is available at www.allaboutcookies.org. If you have any queries regarding this Cookie Policy please raise an enquiry through our online help system.