1. What are cookies?
Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work, remember your preferences, and provide information to the site owner. Similar technologies include local storage and session storage, which store data in your browser rather than as a file on your device.
This policy explains how Roost (operated by Morado Limited) uses cookies and similar technologies on getroost.co.uk and app.getroost.co.uk.
2. The cookies we use
We use strictly necessary cookies by default, and analytics cookies only if you click "Accept analytics" on our cookie banner.
| Cookie / storage key | Purpose | Type | Duration |
|---|---|---|---|
| Cognito session tokens (set by AWS Amplify) | Keeps you logged in to the Roost app. Without this cookie you cannot use the platform. | Strictly necessary | Session / up to 30 days if you choose "Remember this device" |
| CSRF token | Protects against cross-site request forgery attacks. | Strictly necessary | Session |
roost-analytics-consent (localStorage) |
Remembers whether you have accepted or declined analytics cookies, so the banner is not shown again on your next visit. | Strictly necessary | Persistent (until you clear browser storage) |
Google Analytics 4 cookies (_ga, _ga_XXXXXXXXXX) |
Set only if you click "Accept analytics". Counts page visits and basic navigation paths on getroost.co.uk. No cross-site tracking, no advertising profiling. Data is processed by Google LLC under the AWS Data Processing Addendum and Google's Measurement Controller-Controller Data Protection Terms. | Analytics (optional — consent required) | 2 years (_ga) / 2 years (_ga_*) |
3. Cookies we do not use
We do not set any of the following:
- Advertising / marketing cookies — we do not run paid advertising or retargeting campaigns that require tracking cookies.
- Social media tracking pixels — no Facebook Pixel, LinkedIn Insight Tag, or similar.
- Personalisation cookies — beyond what is needed to keep you logged in.
- Cross-site tracking — GA4 is configured with IP anonymisation and does not share data with Google's advertising network.
4. Third-party cookies
We use Amazon Web Services (AWS) for authentication (Cognito) and hosting. AWS may set cookies as part of delivering these services. These are governed by the AWS Privacy Notice.
We do not embed third-party tracking pixels, social media buttons, or advertising tags on any Roost page.
5. Your choices
Cookie banner
When you first visit getroost.co.uk, a banner asks you to accept or dismiss our cookie notice. Because we only use strictly necessary cookies, this banner is informational — we are not requesting consent for optional cookies. If we introduce optional cookies in future, the banner will be updated to include an explicit opt-in choice.
Browser settings
You can control and delete cookies through your browser settings. Guidance for the most common browsers:
Please note: disabling strictly necessary cookies will prevent you from logging in to the Roost platform.
6. Changes to this policy
We may update this Cookie Policy from time to time, for example when we introduce new features that use additional cookies. We will update the "Last updated" date at the top of this page and, for material changes, notify registered users by email. We will always ask for your consent before setting any non-essential cookies.
7. Contact us
If you have any questions about how we use cookies, please contact us:
- Email: privacy@wearemorado.com
- Post: Morado Limited, 603 Mercury House, 2 Jude Street, London, E16 1FF
For more information about cookies generally, visit aboutcookies.org or the ICO's guide to cookies.