Cookie policy
This page lists every cookie and every other piece of storage that this website and the Bottle product put in your browser. There are no advertising cookies, no tracking across other sites and nothing set by any other company. This website counts visits without cookies, as described below.
Why you have not seen a cookie banner. The law requires your permission before a site stores anything that is not needed to provide what you asked for. Everything Bottle stores is either necessary to make the software work or a preference you chose yourself, so there is nothing to ask permission for. The Information Commissioner's Office, which enforces these rules in the United Kingdom, is clear that sites should not ask for consent they do not need. If that ever changes, we will ask before it starts, and this page will change first.
What this covers
Cookies are small files a website asks your browser to keep and send back on the next visit. Browsers can also store information in other ways, including local storage and session storage, and the rules in the United Kingdom treat those the same as cookies. This page covers all of it.
This website
The website you are reading now sets no cookies at all, and carries no advertising. It stores only what Rosie, the sales assistant, needs to keep a chat going from page to page:
- bottle.rosie (local storage): which chat you are in, the key that lets this browser carry on with it, and whether the chat was open. Only set once you open the chat. It lasts until the chat ends or you clear your browser's storage, and the key stops working seven days after the chat started.
- bottle.rosie.prompts (session storage): how many of Rosie's prompts you have seen this visit, so they are not shown twice. Deleted when you close the tab.
Both are needed for something you asked for, a chat that carries on as you move around the site, or stop a prompt you dismissed coming back. Neither is used to identify you or shared with any other company. Chats are left out of the visit recordings described below.
Counting visits. We count visits to this website so we know which pages are useful and how people found them. Two tools do this, and neither sets a cookie or stores anything in your browser: Umami, which runs on our own server at analytics.getbottle.app, and Cloudflare Web Analytics. Each page you open sends them the address of the page, the site or link that brought you here, your screen size, your browser and device type, and roughly where you are (country, region and town), worked out from your connection. Umami does not keep your internet address, and neither tool can follow you to other websites.
Recordings and click maps. For some visits, Umami also records how the page was used: where you moved, clicked and scrolled, so we can see where pages confuse people. Anything you type is hidden, and the register-interest form is left out of the recording completely. Recordings stay on our own server and are deleted after 30 days; the click maps built from them after 90. The recorder stores nothing in your browser either. Because nothing is stored on your device, the law does not require us to ask first, and there is no banner.
The two typefaces are served from this website rather than from another company, so reading these pages does not tell anybody else that you were here.
If you fill in the register-interest form, what you type is sent to us and stored in our database. Nothing about that is kept in your browser, and the form sets no cookie.
Cookies in the Bottle product
These are set when you sign in to Bottle at my.getbottle.app. Every one of them is ours. No other company sets a cookie in Bottle.
| Name | What it is for | Essential? | How long it lasts |
|---|---|---|---|
| bottle.session_token | Keeps you signed in. It is how each page you open knows it is still you, and without it signing in would not work at all. It cannot be read by scripts running in the page, and it is only sent over an encrypted connection. | Yes. Strictly necessary for a service you asked for. | Up to thirty days, extended while you keep using Bottle so you are not signed out in the middle of a working day. Signing out removes it immediately. |
| bottle.two_factor | Carries you from the password step to the code step when your account uses two-step sign-in. Entering a password and entering a code are two separate page loads, and this is what connects them. | Yes. Strictly necessary for a service you asked for. | Only until you enter the code or abandon the attempt. It is not kept afterwards. |
| bottle.trust_device | Remembers that you trusted this particular computer or phone, so two-step sign-in does not ask for a code every single time. It is set only if you tick the box that offers it, and never otherwise. | Yes, where you have asked for it. It exists only because you ticked the box, and it is not used for anything else. | Thirty days from the day you ticked the box, after which a code is asked for again. |
| bottle.theme | Remembers whether you asked for the light or the dark appearance, so the correct one is drawn before the page appears rather than flashing the wrong one at you. It holds one word and nothing else. If you leave the appearance set to follow your computer, this cookie is deleted and not set at all. | No, but it is a preference you chose yourself rather than something done to you, and it holds no information about who you are. | One year, or until you set the appearance back to following your computer, which deletes it. |
| bottle.support_return | Used only by Bottle's own staff, and only while a member of staff is looking at a business's account with that business's permission. It holds the staff member's own sign-in so that ending the look returns them to their own account rather than signing them out. It is never set for a customer. | Yes, for the staff member. It cannot be read by scripts running in the page. | Only as long as the look at the account, which is an hour at most. |
Other things Bottle keeps in your browser
Alongside cookies, Bottle keeps a small number of preferences and conveniences in your browser's own storage. None of it is sent to us, none of it is used to identify you, and none of it is available to any other company. It is listed here because the rules treat browser storage the same way they treat cookies.
| Name | What it is for | Essential? | How long it lasts |
|---|---|---|---|
| bottle.search.recent | The last few things you searched for, so they can be offered again when you next open the search box. Because Bottle is used to look up customers and orders, this can include a customer's name or an order reference. It stays on your device and is never sent to us. | No. It is a convenience. | Until you clear your browser's storage. Only the six most recent entries per business are kept. |
| bottle.toursSeen | Which of the short guided tours of the software you have already taken or turned down, so you are not offered the same one every time you open a page. | No. It is a convenience. | Until you clear your browser's storage. |
| bottle.whatsapp.read | Which WhatsApp chats in Messages you have already opened, so new messages show as unread. It holds each customer's WhatsApp number and the time of the last message you saw, for the business you are signed in to. | No. It is a convenience. | Until you clear your browser's storage. |
| bottle.navCollapsed | Whether you folded the menu down the side of the screen away, so it stays as you left it. It holds yes or no. | No. It is a preference you set yourself. | Until you clear your browser's storage. |
| bottle.duplicatesOpen | Whether the panel suggesting possible duplicate customers is open or closed, so it stays as you left it. It holds yes or no. | No. It is a preference you set yourself. | Until you clear your browser's storage. |
| bottle.pendingFactor | Which kind of second step your sign-in is waiting for, an authenticator app or a code by email, so the right form is shown after the password page. It holds one word and no part of your password or code. | Yes. Strictly necessary for a service you asked for. | Until you close the browser tab. |
| bottle.tab | A random identifier for this browser tab, so that when two people at a business have the same page open each is counted once and shown correctly. It is made in your browser, means nothing outside that page, and is not tied to you. | Yes, for showing who else is working on the same page. | Until you close the browser tab. |
What we do not do
Bottle carries no advertising cookies, no tag manager and no chat widget, on this website, in the product or in the driver apps for iPhone and Android. This website counts visits as described above, and records how some visits use a page, on our own server, as our privacy policy explains. The product records no sessions. In the product, we record which pages people signed in to the office use, against their name and email, as our privacy policy explains; that sets nothing in the browser either. The driver apps run no analytics. Your browser fetches from elsewhere in three places. Screens with a map fetch the map imagery from OpenFreeMap: they see the address your browser is connecting from and roughly which part of the country is displayed, and they set nothing in your browser. The sign-up page runs Cloudflare's Turnstile check, which looks at your browser to tell a person from an automated sign-up. And when an owner chooses to connect WhatsApp, the settings page loads Facebook's script so they can sign in to Meta; Meta can then set or read its own cookies under Meta's cookie policy. Neither runs anywhere else in Bottle.
If that ever changes
If we decide to add something that is not necessary, such as measuring how the product is used, we will ask your permission before it starts and you will be able to say no. Saying no will be as easy as saying yes, nothing will be switched on in advance, and you will be able to change your mind later just as easily. This page will be updated to describe it before it begins, not afterwards.
Clearing or blocking what is stored
Every browser lets you see what a site has stored, delete it, and refuse cookies altogether. The controls are usually under Settings, then Privacy. If you use a content blocker, that will work here too.
It is worth knowing what stops working. If you block or clear cookies for Bottle you will be signed out and will not be able to sign back in, because staying signed in is what the sign-in cookie does. Clearing the other items is harmless: the appearance goes back to following your computer, the menu returns to its normal position, your recent searches are forgotten, and any guided tours you turned down may be offered once more.
Asking us about this
If something on this page is unclear, or you want to know whether a particular thing is stored, email compliance@getbottle.app and a person will answer.
Sorteo Ltd, trading as Bottle. Registered in England and Wales, company number 16426798.
Registered office: 2nd Floor, 1 Church Square, Leighton Buzzard, Bedfordshire, LU7 1AE, United Kingdom.
Last updated 11 November 2026.