Version 1.1 · Effective 31 August 2026 · Operated by Salstead Ltd
Salstead Cookie Policy
1. What are cookies?
Cookies are small text files that a website places on your device. They allow the site to recognise your device on later visits and to function correctly. Similar technologies (local storage, pixels) are covered by this policy.
2. How we use cookies
We use cookies for two purposes:
- Strictly necessary cookies: including authentication and security, which we set without needing your consent because the service cannot function without them.
- Analytics cookies: which we would only set after you give consent through our cookie banner. We do not currently run any analytics, so at present none is set. See section 3a.
3. Cookies we set
- sb-<project>-auth-token
Strictly necessary. Your Supabase sign-in session. Holds both the access and refresh token, and is split across numbered cookies ending
.0,.1and so on when it is too large for a single cookie. Set only once you sign in.It lasts until you sign out, and is refreshed as you use the service.
Browsing the public website signs nothing and sets no cookie at all. A cookie is set only when you sign in.
Your cookie choice is not stored in a cookie
We keep it in your browser’s local storage, under hep-cookie-consent, rather than in a cookie. It never leaves your device and is never sent to us. Clearing your site data clears the choice and you will be asked again.
3a. Analytics: none at present
We currently run no analytics of any kind. No Google Analytics, no Vercel Web Analytics, no product analytics, no session recording, no advertising or cross-site tracking pixels. The public site serves no analytics script, and no analytics cookie is set even if you accept them in the banner.
The consent banner and the analytics switch are real and working, and the mechanism is already wired so that analytics could only ever load after you opt in. We are telling you it is currently unused rather than describing cookies you might reasonably expect but that we do not actually set. If that changes, this page will be updated before any analytics is switched on.
4. Third-party cookies
We embed no third-party trackers, on the public site or in the signed-in application.
Our fonts are served from our own servers rather than requested from Google Fonts, so loading a page sends nothing to a font provider. Where you make a card payment, that is handled on the payment provider’s own pages under their own policy; no payment provider script runs on this site otherwise.
5. Changing your choice
You can change your cookie preferences any time by clicking Cookie settings in the footer of any page. You can also block cookies in your browser settings, though doing so may break sign-in.
6. Do Not Track
We do not respond to browser Do Not Track signals because there is no agreed standard, but we honour the choice you make in our cookie banner.
7. Contact
Questions about this policy: dpo@salstead.com.