Cookie Policy

What this portal stores on your device, and why.

Last updated: 13 August 2026 Tracking cookies: none Third-party cookies: none

The short version. We set two cookies. One keeps you signed in and protects forms against forgery; the other remembers that you have seen the cookie notice. Both are strictly necessary. There is no analytics, no advertising, no social media and no third-party tracking on this portal — so there is genuinely nothing here to opt out of.

1. Why you are not being asked to consent

Under regulation 6 of the Privacy and Electronic Communications Regulations 2003, consent is required before storing information on a user's device — except where the storage is strictly necessary to provide a service the user has requested. Every cookie this portal sets falls within that exemption.

We could have shown you a banner with "Accept all" and "Reject all" buttons anyway. We have not, because it would be misleading: there would be nothing behind the reject button. The ICO guidance on cookies is clear that consent mechanisms should reflect what is actually happening. Ours does.

If we ever add an optional category — analytics, for example — this page and the notice will change, and you will be asked properly, with a real choice and a genuine reject option.

2. Every cookie we set

Name	Type	Lifetime	Purpose
EBF_AGR_SESS	Strictly necessary First party	Session — deleted when you close the browser, and expires after 30 minutes of inactivity	Keeps a signed-in member of staff signed in as they move between pages, and carries the token that protects every form against cross-site request forgery. Without it, staff could not log in and no form on the site would submit. Flagged HttpOnly, Secure and SameSite=Lax.
ebf_cookie_notice	Strictly necessary First party	12 months	Records that you have acknowledged the cookie notice, so it is not shown on every page. Its only possible value is ack. It contains no identifier and cannot be used to recognise you anywhere else.

That is the complete list. If you inspect this site and find a cookie not named above, it did not come from us — please tell us at compliance@eurabeltfuels.eu.

3. What we do not do

No analytics of any kind — no Google Analytics, no Matomo, no self-hosted tracker.
No advertising, remarketing or conversion pixels.
No social media buttons, embeds or share widgets.
No fingerprinting, no local storage or session storage used for tracking.
No third-party scripts, fonts or stylesheets. Every asset is served from this domain — which is also why no external party learns that you visited.
No cross-site or cross-device tracking, and no profiling.

The one deliberate exception is worth naming, because it is not a cookie and people conflate the two. When you record an attestation we store your IP address and browser user-agent in our database as evidence of the signing act — not on your device, and not for tracking. That is explained fully in section 4 of the Privacy Policy.

4. Managing cookies

You can block or delete cookies through your browser settings. Because ours are strictly necessary, blocking them has consequences:

staff will be unable to sign in;
attestation and registration forms will fail, because the anti-forgery token cannot be carried between the form and its submission;
the cookie notice will reappear on every page.

Reading a public page — the verification register, the register of representatives, or these legal pages — works perfectly well with cookies blocked.

Your browser's own guidance: Chrome, Firefox, Edge, Safari.

5. Your acknowledgement on this browser

You have not yet acknowledged the notice on this browser. It appears at the foot of the page.

6. Changes and contact

If our use of cookies changes, this page changes with it and the notice will be shown again. Any new non-essential cookie will be set only after you have given consent.

Questions: compliance@eurabeltfuels.eu. You may also complain to the Information Commissioner's Office — see ICO — make a complaint.