Cookie Policy

The Startup Race Ltd Version 1.0, effective 4 May 2026

This Cookie Policy explains how The Startup Race Ltd (“we”, “us”, “our”) uses cookies and similar tracking technologies on our websites. It sits alongside our Privacy Policy, which sets out how we handle personal data more generally.

This policy is being published as an interim version while we complete a review with our solicitors. We will replace it with a finalised version once that review is complete.

1. What cookies are

A cookie is a small text file that a website places on your device (computer, tablet, phone) when you visit. Cookies let the site remember things about you, such as the choices you have made, the pages you have visited, and whether you are logged in. The same applies to similar technologies (web beacons, pixels, local storage, tag managers); we use the word “cookies” in this policy to cover all of them.

Some cookies are essential for the website to work. Others are optional and only fire if you give consent through our cookie banner.

2. The legal regime

The setting and reading of cookies on your device is regulated in the UK by the Privacy and Electronic Communications Regulations 2003 (PECR), and by the UK General Data Protection Regulation (UK GDPR) where the cookie processes personal data.

Under PECR, we may set strictly necessary cookies (cookies needed for a service you have asked for) without your consent. Any cookie that is not strictly necessary (analytics, advertising, social media, video embeds) requires your consent before it is set. We collect that consent through a banner that appears on your first visit and can be reopened from the banner reset link in our website footer.

If we rely on consent under PECR, we treat that consent as also satisfying the consent requirement under Article 6(1)(a) of UK GDPR for any related processing of personal data.

3. Which sites this policy covers

This policy covers cookies set on the following surfaces:

  • The main website at thestartuprace.com
  • The Race funnel at race.thestartuprace.com (the Race Registration page, the Aspiring Racer waitlist, the Preparation Programme overview, the Foundations checkout, and the Racer Eligibility Assessment)
  • The Investor funnel at join.thestartuprace.com
  • The Innovator Founder Visa programme pages at endorsement.thestartuprace.com
  • The Investment Readiness Assessment at assessment.thestartuprace.com
  • The Magic MRM booking widgets hosted at link.magicmrm.com that we use to schedule calls

Different surfaces use different stacks. The main website is built on WordPress; the Race, Investor, and Visa funnels are built on GoHighLevel; the Investment Readiness Assessment is operated by ScoreApp. The cookies on each surface differ accordingly. The list in section 5 marks which surface each cookie applies to.

4. Categories of cookies we use

We group cookies into four categories. The cookie banner lets you accept or reject each category independently. Strictly necessary cookies do not require consent and cannot be disabled through the banner.

4.1 Strictly necessary

These cookies make the website work. They handle session state, security, the cookie banner itself, and the shopping cart and checkout flow on paid pages. Disabling them would prevent core parts of the site from functioning.

4.2 Functional

These cookies remember your preferences (such as embedded video playback settings and form fields you have already filled in) so that you do not have to re-enter them on a return visit.

4.3 Analytics

These cookies help us understand how visitors use the website (which pages are most read, where visitors come from, how long they stay). The data is used in aggregate to improve the site. We use Google Analytics 4 for this. Analytics cookies fire only after you accept the analytics category in the cookie banner.

4.4 Advertising

These cookies track your interaction with our website so that we and the advertising platforms we work with can measure the performance of our marketing campaigns and show you relevant ads on other websites. We use the Meta (Facebook) Pixel for this. Advertising cookies fire only after you accept the advertising category in the cookie banner.

5. Cookies we set

The list below is accurate as of the effective date at the top of this policy. Cookies, providers, and lifespans can change as we adjust our setup; we keep this list current and re-publish when we make a change.

5.1 Strictly necessary cookies

NameProviderPurposeTypeLifespanWhere used
cookieyes-consentCookieYes (Pixeleo Software Solutions Ltd)Stores your cookie preferences so the banner does not reappear on every page loadFirst-party1 yearMain WordPress site
wordpress_test_cookieWordPressTests whether the browser accepts cookies before loginSessionSessionWordPress (admin areas)
wp-settings-{id}, wp-settings-time-{id}WordPressCustomises admin interface for logged-in usersFirst-party1 yearWordPress admin only
wordpress_logged_in_{hash}WordPressMaintains login session for site administratorsFirst-partySession or 14 daysWordPress admin only
PHPSESSIDWordPressGeneric session cookieSessionSessionWordPress
wp-rocket cookiesWP RocketCaching plugin supportFirst-partyShortMain WordPress site
ghl_session, _ghl_visitor, sb_id, ko_idGoHighLevelSession, cart, and checkout state on funnel pagesFirst-partySession to 1 yearrace., join., endorsement.
__cfruidCloudflareIdentifies trusted web traffic and protects against fraudFirst-partySessionGoHighLevel funnels
Authorize.Net checkout cookiesAuthorize.Net (Visa Inc.)Secures the payment form on the Foundations checkoutFirst-party / third-partySessionrace.thestartuprace.com/foundations
Stripe checkout cookies (__stripe_mid, __stripe_sid)Stripe Payments Europe LtdFraud prevention on Stripe-hosted payment flowsThird-partyUp to 1 yearPages with Stripe checkout

5.2 Functional cookies

NameProviderPurposeTypeLifespanWhere used
comment_author_, comment_author_email_, comment_author_url_*WordPressPre-fills the comment form if you leave a comment on the blogFirst-party1 yearWordPress blog
VISITOR_INFO1_LIVE, YSC, PREFYouTube (Google LLC)Stores video player preferences if a YouTube video is embedded on a pageThird-partySession to 8 monthsPages with embedded YouTube content
Eventbrite cookiesEventbrite Inc.Functional state for any embedded Eventbrite events displayThird-partyVariablePages displaying Eventbrite events

5.3 Analytics cookies

NameProviderPurposeTypeLifespanWhere used
_gaGoogle LLCDistinguishes unique visitorsFirst-party2 yearsAll surfaces with GTM / GA
_ga_{container_id}Google LLCUsed by Google Analytics 4 to persist session stateFirst-party2 yearsAll surfaces with GA4 (e.g. G-JW6JFJDTH0 on the Foundations funnel)
_gidGoogle LLCDistinguishes unique visitors over a 24-hour windowFirst-party24 hoursAll surfaces with GA
_gatGoogle LLCThrottles request rate to GAFirst-party1 minuteAll surfaces with GA
_cflb, __cf_bmCloudflare, Inc.Cloudflare web analytics and bot managementFirst-party / third-party30 minutes to 1 dayGoHighLevel funnels

5.4 Advertising cookies

NameProviderPurposeTypeLifespanWhere used
_fbpMeta Platforms, Inc.Used by Facebook to deliver advertising and to attribute conversions to our ad campaignsFirst-party90 daysAll surfaces with the Facebook Pixel
_fbcMeta Platforms, Inc.Used by Facebook to attribute clicks from Facebook ads to subsequent activity on our siteFirst-party90 daysAll surfaces with the Facebook Pixel
frMeta Platforms, Inc.Used by Facebook to deliver targeted advertisingThird-party90 daysAll surfaces with the Facebook Pixel
trMeta Platforms, Inc.Used by the Facebook Pixel to send tracking events back to FacebookThird-partySessionAll surfaces with the Facebook Pixel
The Facebook Pixel ID currently in use across our estate is 1672920370282211. The Google Analytics 4 measurement ID currently in use on the Foundations funnel is G-JW6JFJDTH0. Other surfaces may use additional measurement IDs configured through Google Tag Manager

6. Third-party content and cookies we do not directly control

Some pages on our websites contain content embedded from third parties. When the embedded content loads, the third party may set its own cookies. We list the most common cases below; the third party’s own cookie and privacy notices apply to those cookies, and we do not control how long they last or what they do.

  • Google Fonts (fonts.googleapis.com, fonts.gstatic.com) loads typefaces. Google may log the request, including your IP address, in line with its own privacy notice.
  • YouTube embeds load video player code from www.youtube.com.
  • Instagram, X, and Facebook social links in our header, footer, and blog do not set cookies until you click them.
  • Magic MRM booking widgets at link.magicmrm.com run on infrastructure provided by GoHighLevel and may set GHL session cookies when the widget loads.
  • Authorize.Net and Stripe payment forms on checkout pages load fraud-prevention scripts that set cookies when the form is shown.
  • Cloudflare sits in front of some of our infrastructure and may set short-lived cookies to identify legitimate traffic.

If you would like a complete enumeration of every cookie set during a particular session, you can inspect them in your browser’s developer tools (Application or Storage tab). The CookieYes banner also lists the current cookies it has detected on the site.

7. Managing your cookie preferences

You can manage your cookie preferences in three ways:

  1. Through our cookie banner. The banner appears on your first visit and lets you accept or reject the analytics and advertising categories. You can reopen the banner at any time from the banner reset link in our website footer (look for “Cookie Settings” or the CookieYes icon).
  2. Through your browser settings. All major browsers (Chrome, Safari, Firefox, Edge) let you delete existing cookies and block new ones. The procedure differs by browser; the aboutcookies.org site has step-by-step guides.
  3. Through third-party opt-outs. For advertising cookies specifically, Meta lets you change your ad preferences in your Facebook account settings. Google lets you opt out of personalised ads in your Google account settings.

Note that disabling strictly necessary cookies will break parts of the website. Disabling functional cookies will mean you have to re-enter information that would otherwise be remembered. Disabling analytics or advertising cookies will not affect how the website works for you.

8. Do Not Track signals and Global Privacy Control

We do not currently respond to browser-based “Do Not Track” signals because there is no agreed industry standard for what to do when one is received. We do honour our cookie banner consent record as the authoritative signal of your preferences.

We are reviewing our position on Global Privacy Control (GPC) signals and will update this policy if we begin to honour them automatically.

9. Changes to this policy

We update this Cookie Policy when our setup changes, when new cookies are added, when providers update their lifespans, or when the law requires it. The effective date at the top of this document is the date of the current version. Where a change is significant, we will tell you by email or by a notice on our websites.

10. How to contact us

For any cookie or privacy question, including a request to exercise your rights:

  • Email: privacy@thestartuprace.com
  • Postal address: The Startup Race Ltd, Orchard Brae House, Care of MBM Commercial, 30 Queensferry Road, Edinburgh, EH4 2HS

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk, by phone on 0303 123 1113, or by post at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Risk Warning: Investment in early-stage companies involves significant risks including illiquidity, lack of dividends, and potential total loss of investment. Past performance is not indicative of future results. Tax reliefs depend on individual circumstances and may change. Professional advice should be sought.