1. Introduction
Raffled UK Limited ("we", "us", "our") operates the Dot.st network: Dot.st, DropCatch.st, and Premium.st (together, the "Services").
This Cookie Policy explains how we use cookies and similar technologies (such as local storage) when you visit our sites. It should be read alongside our Privacy Policy.
We are the data controller for personal data collected through cookies where those cookies involve personal data (for example, identifiers linked to your account session).
Privacy contact: privacy@dot.st (subject line: Cookie / Privacy Request)
2. What are cookies?
Cookies are small text files stored on your device when you visit a website. Local storage is a similar browser feature we use for display preferences. Cookies can be first-party (set by us) or third-party (set by a provider such as Google).
3. How we use cookies
We group cookies into three categories:
| Category | Purpose | Consent required? |
|---|---|---|
| Strictly necessary | Security, sign-in, shopping cart, CSRF protection, load balancing, fraud prevention essential to the service you request | No — these are required for the site to work |
| Functional | Human-verification (Google reCAPTCHA), remembering your light/dark theme choice | Yes — only placed after you accept functional cookies |
| Analytics | Measuring site usage (e.g. Google Analytics, if enabled in future) | Yes — only placed after you accept analytics cookies |
We do not use advertising or social-media tracking cookies on the public network sites.
4. Cookies and storage we use
4.1 Strictly necessary (always active)
| Name | Type | Provider | Purpose | Typical lifetime |
|---|---|---|---|---|
dotst_session (or configured session name) |
Cookie | Dot.st network | Keeps you signed in and maintains your session across Dot.st, Premium.st, and Dropcatch.st when SSO is enabled | Session or up to 120 minutes of inactivity |
XSRF-TOKEN |
Cookie | Dot.st network | Cross-site request forgery protection for forms | Session |
remember_web_* |
Cookie | Dot.st network | "Remember me" persistent login when you opt in | Up to 5 years (if selected) |
| Registration / cart session data | Server-side session | Dot.st network | Domain registration cart and checkout state | Session |
These cookies are exempt from consent under UK PECR because they are strictly necessary to provide a service you have requested.
4.2 Functional (consent required)
| Name | Type | Provider | Purpose | Typical lifetime |
|---|---|---|---|---|
st-color-scheme |
Local storage | Dot.st network | Remembers light or dark display preference | Until cleared |
_GRECAPTCHA, rc::*, and related identifiers |
Cookie / storage | Google reCAPTCHA | Distinguishes humans from bots on login, registration, abuse reports, and other protected forms | Per Google's policies |
When reCAPTCHA is enabled, Google may process technical data (including IP address and browser signals) as an independent or joint controller. See Google Privacy Policy and Google Terms.
If you reject functional cookies, protected forms that rely on reCAPTCHA may not submit until you change your preferences.
4.3 Analytics (consent required — not currently active)
We record first-party, server-side page-view statistics in our own database for operational insight. This does not use browser analytics cookies.
If we enable Google Analytics or similar third-party analytics in future, we will update this policy and only load those tools after you accept analytics cookies.
5. Your choices
When you first visit our sites, a cookie banner lets you:
- Accept all — strictly necessary, functional, and analytics cookies (analytics only applies if we enable third-party analytics tools).
- Reject non-essential — only strictly necessary cookies; functional and analytics cookies are blocked.
- Manage preferences — choose functional and analytics categories individually.
You can change your choice at any time using Cookie settings in the site footer.
Most browsers also let you block or delete cookies via settings. Blocking strictly necessary cookies may prevent sign-in, checkout, or other core features.
6. Legal basis (UK GDPR)
| Processing | Legal basis |
|---|---|
| Strictly necessary cookies | Legitimate interests / necessary for contract (PECR exemption) |
| Functional cookies (reCAPTCHA, theme) | Consent (UK PECR) |
| Analytics cookies (if enabled) | Consent (UK PECR) |
7. International transfers
Google reCAPTCHA may involve processing outside the UK. Where required, we rely on appropriate safeguards such as UK IDTA / UK Addendum to EU SCCs or the provider's UK GDPR compliance programme.
8. Changes
We may update this Cookie Policy when we add or remove technologies. The "Last updated" date below will change and, for material updates, we may show the cookie banner again.
Last updated: August 2026
9. Contact
Questions about cookies or privacy: privacy@dot.st
You may also complain to the Information Commissioner's Office (ICO) in the UK: ico.org.uk.