Legal
Cookies
Effective September 18, 2026 · last updated October 5, 2026
The short version
We set three cookies that are strictly necessary — without them you could not stay signed in or submit a form safely. Google Analytics sets two more, which you can turn off on this page. There are no advertising cookies, and turning analytics off changes nothing about how the site works.
That summary is here so this page gets read. The sections below are the ones that count.
Analytics, and how to turn it off
Our own three cookies make a login and a form work, so they are always set. Google Analytics is different: counting visits is useful to us and not necessary for you. It is on when you arrive, and you can turn it off here.
Turning it off removes Google's cookies from this site straight away and stops anything further being sent to Google. The choice is kept in your own browser's storage — not in a cookie, and not on our servers — so it holds for this browser until you change it or clear your browsing data.
Every cookie set on this site
| Cookie | What it does | How long | Necessary? |
|---|---|---|---|
| pto-kit-session | Keeps you signed in as you move between pages, and remembers one-off messages like “Saved.” Nothing in it identifies you to anyone else. | Until you close the browser, or 2 hours idle | Yes — strictly necessary |
| XSRF-TOKEN | Proves a form was submitted from our own pages and not by another site acting as you. Standard, and the site cannot accept a form without it. | Same as the session | Yes — strictly necessary |
| spirit_player | Set only on a screen paired to Spirit Screen, so an unattended TV in a staff room stays signed in to its own slideshow. Never set by browsing this site. | 90 days | Yes — strictly necessary |
| _ga | Set by Google Analytics when you visit, unless you have turned analytics off. A random number that lets Google tell two page views by the same browser from two different visitors. | 2 years | No — analytics; you can turn it off |
| _ga_XXXXXXXXXX | Also Google Analytics. Keeps the page views of one visit together. | 2 years | No — analytics; you can turn it off |
What is never set
- No Google Analytics cookie once you have turned analytics off.
- No advertising or retargeting cookies, and no pixels from any ad network or social platform. The parts of Google Analytics that feed advertising are switched off.
- No session recording, heatmaps or “behaviour analytics”.
- No third-party cookies. Google Analytics keeps its cookies under this site's own address, so no other website can read them.
We also count how often each tool is used, but that count carries no cookie and no identifier — see the privacy policy, which also says exactly what Google Analytics is sent.
Where analytics never runs
Google Analytics is not loaded on the pages built for students to play on, on a display screen — the Spirit Screen TV and the lost-and-found lobby display — or in a document you print or download.
Fonts and other loaded files
The typeface comes from Bunny Fonts, which sets no cookies and logs no IP addresses. Apart from Google's analytics script, everything else a page needs is served from this site.
Turning them off
For analytics, use the button above. Every browser also lets you block or delete cookies, usually under Settings → Privacy. You are welcome to block ours — but because our three are strictly necessary, blocking them means you will not be able to sign in or submit a form. The free tools on this site that need no account will mostly still work.
Do Not Track and Global Privacy Control
We do not act on either signal yet. Turning analytics off with the button above is what works today.
Questions about this page
PTO Kit is operated by Talent Bottle, Inc.. Write to nirav@talentbottle.com and a person will answer.