Cookie Policy
Draft for review. This policy is a working draft prepared for the platform and must be reviewed and approved by a qualified data-protection adviser / DPO before the service is offered to the public. Items in square brackets
[ ] are placeholders to be confirmed on incorporation of the Community Interest Company.This page lists the cookies and browser storage the Platform uses. Under the Privacy and Electronic Communications Regulations (PECR), strictly-necessary storage needs no consent; everything else stays off until you allow it. You can change your choice any time via “Cookie settings” in the footer.
1. Strictly necessary (always on)
The service cannot function without these. They set no advertising or cross-site tracking.
| Name | Type | Purpose | Expiry |
|---|---|---|---|
sb-<project>-auth-token | Cookie (Supabase) | Keeps you securely signed in after the magic-link exchange. | Session / refresh |
iap-consent | Cookie | Records your cookie choice so we don’t ask every visit. | 1 year |
iap_cookie_consent | Local storage | Your detailed consent record (which categories you allowed). | Until cleared |
iap_theme | Local storage | Remembers light/dark preference (also avoids a flash on load). | Until cleared |
iap_drill_history, basemap, offline queue | Local storage | On-device demo state and the offline write-queue for coordination — never leaves your device. | Until cleared |
2. Analytics & error monitoring (optional — off by default)
Loaded only if you choose “Accept all” or enable it under “Manage”. If you decline, none of this runs.
| Name | Provider | Purpose | Expiry |
|---|---|---|---|
| Sentry storage | Sentry | Diagnose faults and performance issues so we can improve reliability. No advertising. | Per Sentry |
3. Managing cookies
- Use “Cookie settings” (in the footer) to grant or withdraw analytics consent at any time.
- You can also clear cookies and local storage in your browser settings; the Platform will then re-ask on your next visit.
- Blocking strictly-necessary cookies will stop sign-in from working.
4. More information
See our Privacy Policy for how we handle personal data, your rights, and who processes it.