Cookies
United Kingdom · 30 September 2026
This page explains the cookies used on the Millboard Refer a Friend site, which is run by The Millboard Company Limited. It covers this site only. The main Millboard website has its own cookie policy.
The short version
We only use cookies the site needs to work and to stay secure. We do not use analytics, advertising or social media cookies, and nothing on this site tracks you across other websites. Because every cookie here is strictly necessary, we do not ask for your consent to them, but you are entitled to know what they are.
Cookies we set
| Cookie | What it is for | How long it lasts |
|---|---|---|
| mb-refer-a-friend-laravel-session | Keeps track of your visit from one page to the next, so that forms work and, if you sign in, you stay signed in while you use the site. | 2 hours after your last visit |
| XSRF-TOKEN | Security. Proves that a form sent to us came from this site, which stops other websites submitting forms in your name. | The same as the cookie above |
| remember_referrer_59ba36addc2b2f9401580f014c7f58ea4e30989d | Only set if you take part as a referrer and sign in. Keeps you signed in to your referral page so that you do not need a new sign-in link every visit. Signing out removes it. | 30 days |
Cookies set by Cloudflare
The site is protected by Cloudflare, which our hosting provider uses to keep automated and malicious traffic away from it. Cloudflare may set a cookie called __cf_bm, which helps it tell people from bots. It lasts up to 30 minutes and is used only for security.
Cloudflare may also set a cookie called _cfuvid, which lets it limit how many requests one visitor can make in a short time, so the site cannot be flooded. It is deleted when you close your browser and is used only for security.
Our forms also use Cloudflare Turnstile, a check that a person rather than a program is filling them in. It replaces the puzzles some sites ask you to solve. Turnstile runs in a small frame provided by Cloudflare, and Cloudflare may store information in your browser within that frame to carry out the check. It is used only for security, not for advertising or to follow you around the web. Cloudflare's own privacy policy is at cloudflare.com/privacypolicy.
Millboard staff
Millboard staff who look after the scheme sign in to a separate admin area with their work Microsoft account. That uses the same session and security cookies as above, and Microsoft sets its own cookies on its sign-in pages.
Counting clicks, without cookies
Links in our Scheme emails carry a short marker saying which email they came from, and we count how often the Copy link button on the referral page is pressed. These are kept as daily totals only. We do not record who clicked or pressed, and no cookie is used to do it.
Controlling cookies
You can block or delete cookies in your browser settings. If you block the cookies on this site, the forms will not send and you will not be able to sign in to a referral page.
More information
How we use personal information in the scheme is explained in the Scheme Privacy Notice. Questions about this page can go to referrals@millboard.com.