Cookie policy

A cookie is a small file that this site asks your browser to store on your device, and asks for again when you come back. It is what lets the site remember things from one page to the next: that you have signed in, which seats you are choosing, or what you decided on this very page. This policy also covers what the site stores in your browser without it being a cookie in the strict sense, because you are entitled to the same protection either way.

The first time you visit, a banner appears with three options given equal weight: accept, reject and configure. Under “configure” you can switch each category on and off separately. Until you decide, nothing beyond the strictly necessary is switched on, and everything that is not strictly necessary arrives switched off. Your choice is stored for 12 months and you may change it at any time from “Cookie settings”, in the footer of any page. Rejecting costs you no functionality: you can still book and pay. You can also delete cookies already stored from your browser settings.

We set these ourselves and they cannot be switched off: without them you cannot sign in, hold a table while you choose it, or return to your booking while you pay for it. They are not used to identify you outside this site and are not shared with anyone. All of them except the consent cookie carry the “HttpOnly” attribute: the page's own code cannot read their contents, the browser merely sends them to our server. The consent cookie does not, because the page has to read it in order to know what it may switch on.

These are not cookies — they are not sent to any server with each request — but they are stored on your device all the same. You can delete them all by clearing this site's data from your browser.

If you accept usage measurement or advertising, the site loads Google Tag Manager (container GTM-WFRHH97C), operated by Google Ireland Limited. Tag Manager on its own stores nothing on your device: it is a container that loads the tags the organisers configure in it, and it is those tags that set cookies. On checking with a browser against this site, the cookies stored are the ones below. They may end up hosted outside the European Union, under the safeguards Google states for international transfers.

The container also loads the Meta Platforms Ireland pixel (Facebook and Instagram), which is used to measure the festival's advertising on those networks. In the checks carried out against this site it has not stored any cookie, but its code is downloaded from a Meta server, and that alone means Meta receives your device's IP address and the address of the page you are looking at. Should it ever store cookies, the most common one is “_fbp”, which lasts 90 days and identifies the browser in order to attribute advertising to it.

While there is no consent, the application declares every Google storage permission denied — what Google calls “consent mode” — before any tag is loaded. The declaration is made in the page head and ahead of Tag Manager itself: it is that order that makes rejecting worth anything. This has been checked by opening the site in a browser and accepting nothing: no cookie beyond the necessary ones is stored. What does happen is that the tags' code is downloaded from Google's and Meta's servers all the same, and that means they receive your device's IP address and the address of the page; without your consent, however, they can neither store nor read any identifier of yours.

Payment does not take place on this site: your browser takes you to the bank's secure gateway, which sets its own cookies in order to complete the transaction securely. We can neither read nor control them, and they are covered by the bank's own policy. This site never receives your card number.

The home page has a Google map embedded in it so that you can place the venue without leaving the page. It is loaded by Google, so Google receives your device's IP address; it may store cookies of its own, which we can neither read nor control from here. If you would rather it did not load, the venue address is in the footer of every page, as plain text and nothing more.

The fonts are not requested from Google: they are served from this same domain, so loading a page tells nobody on the outside anything. There is no share button and no embedded social media content, and no advertising cookie is switched on without your consent.