Cookie Declaration
How the UK Currency Exchange (cash.gov.uk.goplex.me) uses cookies. Last updated MMXXVI.
What we store
This site uses only strictly-necessary cookies. They are required for it to work (keeping you signed in and protecting forms) and cannot be switched off. We set no analytics, advertising or cross-site tracking cookies, and we never share cookie data with third parties.
| Cookie | Purpose | Type | Expires |
|---|---|---|---|
CASHSESSID |
Keeps you signed in to this site for the duration of your visit, and holds an exchange quote between the “review” and “authorise” steps so the amount you authorise is exactly the one you reviewed. Only a random session identifier is stored in the cookie itself; it is marked Secure, HttpOnly and SameSite=Lax. | Strictly necessary | When you close your browser (session); sign-in lapses after an hour |
csrf (in session) |
A per-session token that protects every form — including “Authorise exchange” — against cross-site request forgery. Held server-side within your session, not as a separate cookie. | Strictly necessary | With the session |
Dismissing the first-visit notice is remembered in your browser's localStorage
(not a cookie), so the banner stays away without storing anything extra.
Your sign-in
You sign in with your GoplexMC in-game account (the 2k6Auth username and password you
set with /register). This site checks those details itself and keeps its own
first-party session cookie on cash.gov.uk.goplex.me only — it is not shared with the
other GOV.UK (in-game) sites, so each of them asks you to sign in separately.
No payment details are ever stored in a cookie. Exchanges are carried out by the game server from your in-game wallet. See the Owen2k6 Network for network-wide policies.