Cookie Policy

In plain English

• We only use cookies that the site needs to work: keeping you signed in, protecting forms and remembering that you have seen this notice.
• We do not use analytics, advertising or tracking cookies, so we do not ask for cookie consent.
• If that ever changes, we will update this page and ask for your consent first, with an equally easy way to say no.

1. Who we are

This policy explains how The Next Renaissance Ltd, trading as Slurry (company number 10373346, registered office [registered office address]), uses cookies and similar technologies on slurry.io, app.slurry.io and related pages. Contact: privacy@slurry.io.

2. What cookies are

Cookies are small text files placed on your device by a website. Similar technologies include local storage and session storage in your browser. The Privacy and Electronic Communications Regulations 2003 (PECR) require consent for cookies unless they are strictly necessary to provide a service you have asked for.

3. Cookies we use

We use only strictly necessary cookies. They are exempt from the consent requirement, but we list them so you know what they do.

Name	Purpose	Type	Duration
slurry_session	Keeps you signed in to the client area and admin area and links requests to your session	First-party, HttpOnly, Secure, SameSite=Lax	Session, or up to 7 days if you choose to stay signed in
slurry_csrf	Protects forms against cross-site request forgery	First-party, Secure, SameSite=Strict	Session
slurry_mfa	Records that you have completed multi-factor authentication on this device for the current session	First-party, HttpOnly, Secure	Up to 12 hours
__stripe_mid, __stripe_sid	Set by Stripe on checkout and billing pages to process payments securely and prevent fraud	Third-party (Stripe), Secure	Up to 1 year and 30 minutes respectively
Cloudflare security cookies (for example __cf_bm, cf_clearance)	Set by Cloudflare to distinguish people from bots and protect the site from attack	Third-party (Cloudflare), Secure	Up to 30 minutes, or up to the lifetime set by the challenge

The exact cookie names set by Stripe and Cloudflare are controlled by them and may change. See https://stripe.com/cookie-settings and https://developers.cloudflare.com/fundamentals/reference/policies-compliances/cloudflare-cookies/ for their current lists.

4. Simulation subdomains

Simulations at .slurry.io are machine-to-machine API endpoints. Slurry does not set cookies on Simulation responses unless a customer has configured a simulated API to return a cookie header as part of its test behaviour. Those simulated cookies are test data controlled by the customer, and our Acceptable Use Policy prohibits serving Simulations to members of the public.

5. What we do not use

We do not use analytics cookies, advertising or retargeting cookies, social media tracking pixels or cross-site tracking. If we introduce non-essential cookies in the future, we will update this policy, show a consent banner before any non-essential cookie is set, and give you a "Reject" option as prominent as "Accept".

6. Managing cookies

You can block or delete cookies in your browser settings. If you block strictly necessary cookies, you will not be able to sign in or use the client area.

7. Changes

We will post any change to this policy on this page with a new version date.