01Overview
This Cookie and Tracking Policy explains how Eleva Platform Ltd (Company No. 17158073) uses cookies, mobile tracking technologies, device identifiers, and similar technologies in the Eleva mobile application and at elevaplatform.org.
This Policy should be read alongside our Privacy Policy and forms part of it. Defined terms used here have the same meaning as in the Privacy Policy.
We comply with the Privacy and Electronic Communications Regulations (PECR), UK GDPR, EU GDPR, and applicable advertising consent requirements of the Google Play platform.
02What We Use
Since Eleva is a mobile application rather than a traditional website, we primarily use mobile SDKs and device identifiers rather than browser cookies. These function similarly to cookies in terms of storing information and enabling tracking.
The technologies we use include:
- Android Advertising ID (GAID): A resettable device identifier used for advertising personalisation — requires your explicit consent;
- Firebase Authentication tokens: Secure session tokens for keeping you logged in — essential, no consent required;
- Local storage / sqflite: App-local data storage for preferences and cached content — essential;
- Analytics identifiers: Pseudonymous usage tracking for platform improvement;
- Third-party SDK identifiers: Used by integrated partners as described below.
03SDK & Tracker Inventory
| SDK / Tracker | Provider | Purpose | Type |
|---|---|---|---|
| Firebase Authentication | Google LLC | User authentication and session management | Essential |
| AWS SDK (mobile) | Amazon Web Services | API communication with platform backend | Essential |
| Stripe Identity SDK | Stripe Payments UK Ltd (FCA FRN: 900461) | KYC identity verification (triggered at 3 tokens) | Essential |
| Google Pay API | Google LLC | Payment processing for token purchases | Essential |
| Google AdMob SDK | Google LLC | In-app advertising; reads Android Advertising ID for personalisation | |
| Android Advertising ID (GAID) | Google / Device OS | Personalised advertising identifier | |
| Google Cloud Vision AI | Google LLC | Automated content moderation (pre-publication image analysis) | Essential |
| Crash reporting / diagnostics | Internal / AWS CloudWatch | App stability monitoring and crash analysis | Analytics |
| Bunny CDN | BunnyWay d.o.o. | Content delivery; logs IP address for routing | Essential |
04Consent-Required Tracking
The following tracking activities require your explicit opt-in consent before they are activated:
Google AdMob Personalised Advertising
When you first launch the Eleva App, you will be presented with a consent prompt (App Tracking Transparency-style) asking whether you consent to personalised advertising. This is required before the Android Advertising ID is shared with AdMob or any advertising network.
- If you consent: AdMob receives your Advertising ID and usage signals to serve targeted ads relevant to your interests;
- If you decline: You will still see advertisements, but they will not be personalised to you. Your Advertising ID will not be shared.
Withdrawing Consent
You may change your advertising consent at any time:
- Within the App: Settings → Privacy → Advertising Preferences;
- Via your Android device: Settings → Privacy → Ads → Delete Advertising ID or Opt out of Ads Personalisation;
- Via Google: adssettings.google.com.
Withdrawing consent will take effect within 24 hours and does not affect the lawfulness of processing carried out before withdrawal.
05Essential Technologies (No Consent Required)
The following technologies are strictly necessary for the App to function and do not require your consent under PECR and GDPR:
- Authentication tokens — to keep you logged in securely;
- Local app storage — to save your preferences, cached feed data, and app state;
- API communication — to transmit your requests to our servers;
- Content moderation — to check uploads before publication (Google Vision AI);
- Payment processing — to handle Google Pay transactions;
- KYC verification — when triggered by the 3-token threshold.
You cannot opt out of essential technologies without ceasing to use the App, as they are required for its operation.
06Website Cookies (elevaplatform.org)
The elevaplatform.org website uses only the following:
- Session cookies — temporary, deleted when you close your browser, used for basic website functionality;
- Security cookies — to prevent CSRF and protect form submissions.
We do not currently use analytics cookies, advertising cookies, or third-party tracking cookies on our website. If this changes, we will update this policy and present a consent banner.
07Retention of Tracking Data
- Advertising identifiers: used per session; not stored permanently by Eleva;
- Analytics data: retained for 24 months, then anonymised;
- Authentication tokens: valid for duration of session + standard expiry;
- CDN routing logs (Bunny): 30 days.
08Your Rights & Contact
For questions about this Policy or to exercise your data rights, contact us at:
Email: privacy@elevaplatform.org
Eleva Platform Ltd · 4A Central Square, Liverpool, L31 0AQ, UK · Company No. 17158073
UK complaints: ico.org.uk