Cookies and your choices
Some of what we store is needed to sell you a ticket. The rest is about measuring our advertising, and it is yours to switch off. Nothing here is required to buy, view or use a ticket.
Your choices
Changes take effect immediately. Turning off advertising also deletes the identifiers Meta has already stored on this device.
Strictly necessary
Keeps you signed in and your order attached to you through checkout. The site cannot sell you a ticket without these, so they cannot be switched off.
Advertising
Lets Meta (Facebook and Instagram) recognise that you visited, so we can show the fair to people like you and stop paying to advertise to those who already have tickets. Sets the _fbp and _fbc cookies.
Sharing purchase data
When you buy a ticket, sends your email and phone number to Meta in scrambled (hashed) form so a sale can be matched to the advert that led to it. We never send them in readable form.
Improving the site
Google Analytics, which counts which pages people use and where checkout goes wrong so we can fix it. It reports visits in aggregate, not who you are, and your IP address is shortened before it is stored. Sets the _ga cookies.
Strictly necessary
These cannot be turned off, because the site cannot keep you signed in or take an order without them. They are not used for advertising.
| Name | Set by | What it does | Kept for |
|---|---|---|---|
| __Secure-authjs.session-token | This site | Keeps you signed in, so your tickets stay attached to your account and reach you after payment. | 30 days |
| __Host-authjs.csrf-token | This site | Stops another site from submitting the sign-in or checkout form on your behalf. | Until you close the browser |
| __Secure-authjs.callback-url | This site | Returns you to the page you were on after you sign in. | Until you close the browser |
| mf_consent | This site | Remembers the choices you make on this page, so you are not asked again on every visit. | 6 months |
Advertising — optional
Set only while advertising is switched on above.
| Name | Set by | What it does | Kept for |
|---|---|---|---|
| _fbp | Meta | Identifies your browser to Meta so we can measure whether an advert led to a ticket sale, and avoid paying to advertise to people who already bought. | 90 days |
| _fbc | Meta | Records which advert you clicked to arrive here. | 90 days |
Improving the site — optional
Set only while “improving the site” is switched on above. These tell us how many people reached checkout and where it went wrong, not who you are.
| Name | Set by | What it does | Kept for |
|---|---|---|---|
| _ga | Tells one returning visitor apart from another so visit counts are not wildly overstated. Shared with medievalfair.co.za, so moving between the two sites counts as one visit rather than two. | 2 years | |
| _ga_VP1J9XKW66 | Keeps track of the current visit for this particular site. | 2 years |
Data we share when you buy
If “sharing purchase data” is on when you check out, we send Meta the order value and your email address and phone number in scrambled (hashed) form, so a sale can be matched to the advert that led to it. Hashing is one-way: Meta receives a fingerprint, not your address or number. We never send them in readable form, and we never sell your details to anyone.
Your choice is recorded against the order at the moment you pay, so switching this off means nothing is sent for that purchase — even though the sale is confirmed a few moments later, once your bank has responded.
Other ways to control this
Every major browser can block or delete cookies in its settings, and that overrides anything set here. Blocking the strictly necessary ones will stop you being able to sign in or check out. You can also change what Meta shows you from your Facebook or Instagram ad preferences.
Last updated August 2026. If you want to know what we hold about you, or want it deleted, reply to your confirmation email and we will sort it out.