Version 1.0 · Effective 21 May 2026 · Operated by Salstead Ltd
Salstead Cookie Policy
1. What are cookies?
Cookies are small text files that a website places on your device. They allow the site to recognise your device on later visits and to function correctly. Similar technologies (local storage, pixels) are covered by this policy.
2. How we use cookies
We use cookies for two purposes:
- Strictly necessary cookies: including authentication and security, which we set without needing your consent because the service cannot function without them.
- Analytics cookies: which we only set after you give consent through our cookie banner.
3. Cookies we set
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
| sb-access-token | Strictly necessary | Supabase authentication token for signed-in users | Session |
| sb-refresh-token | Strictly necessary | Keeps users signed in | 7 days |
| salstead_csrf | Strictly necessary | Cross-site request forgery protection | Session |
| salstead_consent | Strictly necessary | Stores your cookie consent choice | 1 year |
| _ga, _ga_* | Analytics (consent required) | Google Analytics 4, privacy-friendly, IP anonymised | 13 months |
| va_* | Analytics (consent required) | Vercel Web Analytics, no cross-site tracking | 1 year |
4. Third-party cookies
Some pages embed content from third parties (for example, Stripe Checkout). Those providers may set their own cookies subject to their own policies. We avoid embedded third-party trackers in the authenticated app surface.
5. Changing your choice
You can change your cookie preferences any time by clicking Cookie settings in the footer of any page. You can also block cookies in your browser settings, though doing so may break sign-in.
6. Do Not Track
We do not respond to browser Do Not Track signals because there is no agreed standard, but we honour the choice you make in our cookie banner.
7. Contact
Questions about this policy: dpo@salstead.com.