Last updated: 30 July 2026

Cookie Policy

This policy explains what cookies (and similar technologies) Overrun uses, why we use them, and how you can control them. It sits alongside our Privacy Policy.

What cookies are

Cookies are small text files that a website places on your device when you visit. They let sites remember things about you - whether you are signed in, what you have in a cart, what language you prefer - and they also let third parties analyse how their services are being used.

Cookies set by Overrun itself are “first-party” cookies. Cookies set by services we embed on our pages (such as Google Analytics or Clerk) are “third-party” cookies.

Cookies we use

The tables below list every cookie Overrun currently sets, either directly or through the third-party services we embed. Providers occasionally change their cookie names - if you notice something here that no longer appears in your browser (or vice-versa) it is because a provider has updated their implementation.

Essential

CookieProviderPurposeDuration
__client, __client_uat, __client_uat_G-*Clerk (via clerk.overrunau.com.au)Keeps you signed in and remembers which environment (production vs preview) issued your session token.Up to 10 years (extended on each visit)
__clerk_environmentClerk (overrunau.com.au)Local-storage key that holds Clerk's environment configuration for the current browser.Persistent (local storage)
__cf_bmCloudflare (via Clerk domains)Bot-management cookie used by Clerk's Cloudflare edge to distinguish humans from automated traffic.30 minutes
_cfuvidCloudflare (via Clerk domains)Ensures session security when Clerk is behind Cloudflare.Session
TERMLY_API_CACHE, cookie_consent_*TermlyRemembers your cookie-consent choices so we do not re-prompt on every page load.1 year

Analytics

CookieProviderPurposeDuration
_gaGoogle Analytics 4Distinguishes anonymous visitors for aggregate site-usage analytics. Only set after you accept analytics cookies.2 years
_ga_G-SP0G1MLPKEGoogle Analytics 4Distinguishes anonymous sessions for a single visitor on the Overrun GA4 property.2 years
_vercel_*Vercel AnalyticsAnonymous page-view counting for performance and traffic reporting. No cross-site tracking.Session / 1 year

Advertising

CookieProviderPurposeDuration
_fbpMeta (Facebook)Identifies a browser to Meta so we can measure whether our Facebook and Instagram ads bring people to Overrun, and show ads to people who have visited before. Only set after you accept advertising cookies.3 months

Do we serve advertising cookies?

One. The Meta pixel is installed and sets the _fbp cookie, listed under Advertising in the table above. It loads only if you accept advertising cookies in the consent banner - decline, and it never runs.

We are not running paid advertising campaigns yet. The pixel is in place so a retargeting audience exists by the time we do, because that audience can only be built from the day the pixel goes in. No other advertising or retargeting third party is allowed to place cookies on the site.

Controlling cookies in your browser

In addition to Overrun’s consent banner, every mainstream browser lets you view, block, and delete cookies at the browser level. Blocking essential cookies will break sign-in and other core functionality:

Changes to this policy

We update this policy whenever we add or remove a cookie, or when a provider changes what it sets. The “Last updated” date at the top of the page always shows the current version.

Contact us

Questions about our use of cookies:

Email: hello@overrunau.com.au

Overrun AU · ABN 94 245 738 263 · hello@overrunau.com.au