Version: 1.0
Effective Date: [INSERT DATE]
Last Reviewed: [INSERT DATE]
Summary
FindPlay uses cookies and similar tracking technologies to keep the platform working, understand how people use it, and — where you've given permission — to personalise your experience and measure the reach of our content. This policy explains what we use, why we use it, and how you stay in control.
We do not sell your personal information to third parties for behavioural advertising. Our commercial model is built on first-party data, not third-party tracking networks. Cookies we deploy reflect that.
1. Who This Policy Applies To
This Cookie Policy applies to anyone who visits or uses:
The FindPlay website at findplay.com and all subdomains (e.g., app.findplay.com, help.findplay.com)
The FindPlay mobile application
Any embedded FindPlay widgets or booking tools hosted on third-party sites
It should be read alongside our Privacy Policy and Terms of Service.
The controller of your data for the purposes of this policy is FindPlay, Inc., a company incorporated in the United States (EIN: 36-5170181), with its principal place of business at [REGISTERED ADDRESS].
2. What Cookies Are
Cookies are small text files placed on your device when you visit a website. They allow the site to remember information about your visit — things like whether you're logged in, your language preference, or whether you've already seen a consent notice.
Beyond traditional cookies, we also use:
Local storage and session storage — browser-based storage that works similarly to cookies but persists differently
Pixel tags / web beacons — tiny image files embedded in pages or emails that signal when content has been opened or viewed
Device fingerprinting signals — aggregated, non-identifiable signals used to detect fraud and prevent abuse (not used for advertising)
Software development kit (SDK) trackers — equivalent of cookies in our mobile application
Collectively, this policy refers to all of these as "cookies" unless a distinction matters.
3. Cookie Categories We Use
We group cookies into four categories. You can manage your preferences for categories 2, 3 and 4 through our Cookie Preference Centre.
3.1 Strictly Necessary
These cookies are required for the platform to function. They cannot be switched off. No consent is required for their placement.
Cookie / Technology
Purpose
Duration
fp_session
Authenticates your logged-in session
Session
fp_csrf
Prevents cross-site request forgery attacks
Session
fp_consent
Stores your cookie consent preferences
12 months
fp_geo
Routes requests to the correct regional server
Session
fp_lb
Load balancer session affinity (infrastructure)
Session
__stripe_mid
Fraud prevention for payment processing (Stripe)
1 year
__stripe_sid
Stripe session management
30 minutes
Legal basis (GDPR): Legitimate interests (Article 6(1)(f)) — the operation of a functional, secure digital service.
Australian Privacy Act: Not personal information under the APPs where no individual is identified; collected as part of platform operation.
3.2 Functional / Preference
These cookies remember your choices and settings to improve your experience. They are not essential to platform operation, but without them you may need to re-enter preferences each visit.
Cookie / Technology
Purpose
Duration
fp_lang
Stores your language preference
12 months
fp_currency
Stores your currency display preference
12 months
fp_recent_search
Recalls your recent activity searches
30 days
fp_ui_prefs
Saves display preferences (list vs. map view, etc.)
12 months
fp_onboarding
Tracks onboarding progress so we don't repeat steps you've completed
90 days
fp_provider_draft
Preserves in-progress listing drafts for providers
7 days
Legal basis (GDPR): Consent (Article 6(1)(a)).
Australian Privacy Act: Collected with notice; subject to your preferences in the Cookie Preference Centre.
3.3 Analytics and Performance
These cookies help us understand how visitors and users interact with FindPlay — which pages are visited, where people drop off, and where the experience can improve. All analytics data is aggregated and pseudonymised before we act on it. We do not use this data to build individual advertising profiles.
Cookie / Technology
Provider
Purpose
Duration
_ga, _ga_*
Google Analytics 4
Aggregate site traffic and behaviour analytics
2 years
_gid
Google Analytics 4
Distinguishes users across sessions
24 hours
fp_perf
FindPlay (first-party)
Internal performance and error monitoring
30 days
fp_ab
FindPlay (first-party)
A/B test allocation — ensures consistent experience during a test
Duration of test
fs_uid
FullStory (or equivalent session replay tool)
Anonymised session recording for UX research
1 year
Configuration note: Google Analytics 4 is configured with IP anonymisation enabled, data retention set to 14 months, and Google Signals disabled. We do not enable Google's advertising features or cross-site tracking within our GA4 instance.
Legal basis (GDPR): Consent (Article 6(1)(a)).
Australian Privacy Act: Collected with notice and subject to consent preferences.
3.4 Marketing and Attribution
We use a limited set of marketing cookies to understand how people find FindPlay (e.g., via a partner, affiliate link, or paid channel) and to measure the effectiveness of our own campaigns. We do not participate in third-party behavioural advertising networks. We do not allow advertisers to target FindPlay users via our platform.
Cookie / Technology
Provider
Purpose
Duration
fp_aff
FindPlay (first-party)
Affiliate click tracking — records which affiliate partner referred a visit for commission attribution
30 days
fp_utm
FindPlay (first-party)
Campaign source attribution (UTM parameters)
Session
_fbp
Meta (Facebook)
Conversion measurement for FindPlay's own Meta ad campaigns — tracks whether a campaign resulted in a registration
90 days
_gcl_au
Google
Google Ads conversion tracking — measures whether a campaign resulted in a registration
90 days
Important: The Meta Pixel and Google Ads tags are deployed only for conversion measurement — to tell us whether our own advertising resulted in a sign-up. They are not used to build retargeting audiences or to enable personalised advertising across the broader web. Where technically possible, we use server-side conversion APIs instead of browser-side pixels to reduce the volume of data transmitted to these platforms.
Legal basis (GDPR): Consent (Article 6(1)(a)).
Australian Privacy Act: Collected with notice and subject to consent preferences.
4. Third-Party Cookies
Some cookies are set directly by third-party services that we integrate with. We do not control the behaviour of these third parties' cookies beyond what their settings and APIs allow us to configure.
Third-party services that may set cookies on FindPlay pages include:
Service
Purpose
Their Privacy Policy
Stripe
Payment processing and fraud prevention
stripe.com/privacy
Google (Analytics 4, Ads)
Analytics and campaign measurement
policies.google.com/privacy
Meta
Conversion measurement
facebook.com/policy
Cloudflare
CDN, DDoS protection, and bot management
cloudflare.com/privacypolicy
Intercom (or equivalent)
Customer support chat widget
intercom.com/privacy
FullStory (or equivalent)
Session recording for UX research
fullstory.com/legal/privacy
We periodically review our third-party integrations and remove those that are no longer necessary.
5. Cookie Consent and Your Choices
5.1 Our Consent Mechanism
On your first visit to FindPlay, you will see a cookie consent banner. You can:
Accept all — enable all categories
Reject non-essential — enable only Strictly Necessary cookies
Manage preferences — open the Cookie Preference Centre and toggle individual categories
Your choice is recorded in the fp_consent cookie and applied immediately. It lasts 12 months. After that, we'll ask again.
You can change your preferences at any time by clicking Cookie Preferences in the footer of any FindPlay page, or by navigating to Account Settings → Privacy → Cookie Preferences.
5.2 Browser-Level Controls
All major browsers allow you to view, block, or delete cookies through their settings. Blocking all cookies will break core FindPlay functionality — you won't be able to log in or complete a booking.
Browser cookie management guides:
Chrome: chrome://settings/cookies
Safari: Preferences → Privacy → Manage Website Data
Firefox: about:preferences#privacy
Edge: edge://settings/privacy
5.3 Opting Out of Analytics Tools
You can opt out of Google Analytics measurement directly at: tools.google.com/dlpage/gaoptout
5.4 Do Not Track (DNT) and Global Privacy Control (GPC)
Do Not Track (DNT): The DNT browser signal does not yet have a consistent legal standard in Australia or internationally. We acknowledge DNT signals but do not currently alter cookie behaviour solely in response to them. We prefer using our Cookie Preference Centre for explicit, granular consent.
Global Privacy Control (GPC): Where GPC is legally required to be honoured — currently including California (CCPA/CPRA) — FindPlay treats a valid GPC signal as an opt-out of the "sale" or "sharing" of personal information, including via cookies that enable cross-context behavioural advertising. This is applied automatically when we detect a valid GPC signal from your browser.
6. Jurisdiction-Specific Information
6.1 Australia
FindPlay's primary market is Australia. We operate under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
Cookie data that constitutes personal information under Australian law — such as data that, in combination with other information we hold, identifies you — is handled in accordance with our Privacy Policy. You have the right to request access to or correction of your personal information, and to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
6.2 European Union and United Kingdom (GDPR / UK GDPR)
If you access FindPlay from the EU or UK, the following additional rights apply under the General Data Protection Regulation (GDPR) and UK GDPR:
Right to withdraw consent — you can withdraw cookie consent at any time via Cookie Preferences. Withdrawal does not affect the lawfulness of processing before withdrawal.
Right to access — you may request a copy of personal data processed via cookies.
Right to erasure — you may request deletion of personal data collected via cookies where no other legal basis applies.
Right to object — you may object to processing based on legitimate interests.
Right to lodge a complaint — you may complain to your local supervisory authority. In the EU, this is the supervisory authority in your member state. In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk.
Our legal bases for each cookie category are set out in Section 3 above.
6.3 California (CCPA / CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) gives you additional rights:
Do we "sell" or "share" personal information via cookies? We do not sell personal information in the traditional sense. However, the CCPA/CPRA broadly defines "sharing" to include making personal information available to third parties for cross-context behavioural advertising. To the extent our analytics or marketing cookies could constitute "sharing" under this definition, you have the right to opt out.
How to opt out: Use our Cookie Preference Centre to disable Marketing and Analytics cookies, or activate the Global Privacy Control (GPC) signal in your browser — we honour it automatically.
Other California rights: Access, correction, deletion, portability, and non-discrimination for exercising privacy rights. Contact us at privacy@findplay.com or see our Privacy Policy for the full CCPA/CPRA disclosures.
7. Cookies in Email Communications
When we send you emails, we may include a pixel tag that tells us whether the email was opened and which links were clicked. This helps us assess the relevance of our communications and measure campaign performance.
You can prevent pixel tag tracking by disabling automatic image loading in your email client. Unsubscribing from marketing emails also removes you from email-level tracking. Transactional emails (e.g., booking confirmations, receipts) may still contain functional tracking to confirm delivery.
8. Data Retention
Cookie data is retained for the duration specified in the tables in Section 3. Aggregated, anonymised analytics data derived from cookies may be retained for longer periods for business analysis purposes — this data cannot be used to identify you individually.
When you delete your FindPlay account, we delete or anonymise any account-linked cookie data within 30 days, subject to legal hold obligations.
9. Changes to This Policy
We update this policy when:
We add, change, or remove cookies or tracking technologies
The law changes in a jurisdiction we operate in
Our data processing practices materially change
Material changes will be communicated via a notice on the FindPlay platform and, where we have your email address, by email. The effective date at the top of this document will always reflect the most recent version. Prior versions are available on request.
10. Contact Us
Privacy and Data Enquiries:privacy@findplay.com
Mailing Address:FindPlay, Inc.
[REGISTERED ADDRESS]
United States
Australian Privacy Complaints:We take privacy complaints seriously. If you have a concern, contact us at privacy@findplay.com first. If we cannot resolve it to your satisfaction within 30 days, you may escalate to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
EU/UK Data Subject Requests:eu-privacy@findplay.com