Legal
Cookie Policy
Version 1.2 · effective 9 October 2026
Cookies and similar storage help the Site function. The Site currently uses necessary administrator authentication storage; no analytics or advertising pixels were identified.
7.1 Technologies identified
- No sidebar-state or other functional preference cookie is currently set. (The site code includes an unused interface component capable of setting a first-party "sidebar_state" cookie; it is not mounted on any page. This Policy will be updated before any such cookie is used.)
- Supabase authentication token under a project-specific sb-…-auth-token key — browser localStorage used for authorised administrator sessions; duration depends on session and logout behaviour.
- __cf_bm — strictly necessary security cookie set by Cloudflare, our delivery provider, to distinguish people from automated bots and protect the Site from abuse; expires after about 30 minutes; HttpOnly and Secure.
- __dpl — first-party cookie set by our hosting platform (Lovable) as part of delivering the Site; expires after about 24 hours. We do not use it for analytics, advertising or tracking.
- Essential server-side security and transaction processes may process technical request data without placing an optional analytics cookie.
7.2 Consent
Technologies strictly necessary for a service requested by a user generally do not require optional cookie consent, but must be explained. If non-essential analytics, advertising or similar storage is later introduced, we will update this policy and implement the consent controls required by applicable law before those technologies operate.
7.3 Controls
You can use browser controls to delete or block cookies and local storage, although doing so may prevent sign-in or affect site functionality. The Site does not currently provide a separate marketing-cookie preferences panel because the audit found no non-essential tracking technologies.
7.4 Third-party resources and changes
The Site's fonts are hosted on the Site itself, so loading pages does not contact Google Fonts. Our hosting and delivery providers receive normal browser connection information (such as IP address and browser type) to deliver and secure the Site; other than the cookies listed in 7.1, they do not set cookies or other storage on your device through the Site. This policy will be updated when site technologies change. Contact hello@nick-does-business.com.
