In short
- Buying tickets as a guest sets no Lilka cookies. Lilka’s only cookies are for people who sign in to an account (ticket buyers or organisers).
- The first time you visit, a pop-up asks whether we may count your visit anonymously. We only count it if you say yes. Counting uses no cookies and doesn’t store your IP address.
- You can change your choice at any time with Cookie settings at the bottom of every page.
- Stripe’s payment page uses its own cookies to help stop card fraud.
- No advertising, social media pixels or tracking across other websites.
1What cookies are
Cookies are small text files a website saves in your browser. Browser storage (often called local storage) works in a similar way. Both let a site remember things between pages, such as whether you’re signed in.
UK law lets websites use cookies and similar storage without asking if they are strictly necessary for a service you’ve asked for. Everything Lilka stores falls into that group. Anonymous visit counting doesn’t store anything on your device either, but we still ask you first.
2What we use
| Name | Set by | What it does | How long it lasts |
|---|---|---|---|
lilka_session (cookie) | Lilka | Keeps you signed in to your account. Only set when you sign in. It can’t be read by scripts on the page. | 24 hours, or until you sign out |
lilka_csrf (cookie) | Lilka | A random security code that stops other websites making changes to your account while you’re signed in | 24 hours |
lilka_consent (browser storage) | Lilka | Remembers your answer to the cookie pop-up, so we don’t ask on every page. Never sent to us. | Until you change it or clear your browser data |
lilka.saved, lilka.following (browser storage) | Lilka | Remembers events you save with the heart button and organisers you follow, on your device only | Until you remove them or clear your browser data |
lilka.lastRef (browser storage) | Lilka | Fills in your booking reference when you open “Manage my booking” | Until you clear your browser data |
| Stripe cookies | Stripe | Set on Stripe’s own payment page (checkout.stripe.com), not on Lilka, to help spot fraudulent card payments. See Stripe’s cookie policy. | Set by Stripe |
Our font is served from our own server, so loading a page doesn’t send your details to anyone else.
3How we count visits
To see how many people visit and where they came from, Lilka records each page view with: the page, the website or app that sent you (for example Instagram), whether you’re on a phone or computer, and an anonymous code.
The anonymous code is made from your IP address and browser details mixed with a secret that changes every day. We never store your IP address, we can’t work out who you are from the code, and because the secret changes daily we can’t follow you from one day to the next. Nothing is saved on your device.
We only count your visit if you choose Accept all in the cookie pop-up, or switch on “Anonymous visit counting” under Manage. If your browser sends a “Do Not Track” or “Global Privacy Control” signal, we don’t count your visit even then. Visits by people signed in to an account aren’t counted.
We also note your browser’s time zone setting (for example “Europe/London”) to show a rough location in our analytics. It’s a setting every browser shares with every website; it doesn’t reveal your address and we don’t use GPS.
If a page crashes, your browser sends us the error message and page path (never the rest of the address) so we can fix it. This doesn’t use cookies either.
4What we don’t use
- Advertising or retargeting cookies
- Social media pixels (such as Meta or TikTok)
- Third-party analytics (such as Google Analytics)
- Anything that follows you across other websites
If that ever changes, we’ll ask for your permission first, with ‘Reject’ as easy to choose as ‘Accept’, and list the changes here.
5Managing cookies and storage
Use Cookie settings at the bottom of any Lilka page to change your choice. You can also block or delete cookies and site data in your browser settings. Blocking them doesn’t stop you buying tickets as a guest; it only means saved events won’t be remembered and you won’t be able to sign in.
6Questions
Email privacy@lilka.co.uk. Our privacy policy explains how we use personal data more generally.