Cookie Policy
Last updated
We set a small number of cookies and similar storage items. The ones that sign you in and keep the site secure are essential and always on. Analytics and preference storage are off until you turn them on, and you can change your mind at any time.
1. What this covers
Cookies are small files a site stores on your device. This policy also covers local storage and session storage, which do the same job by different means. UK law treats them the same way, under the Privacy and Electronic Communications Regulations, so we do too.
Except for the strictly necessary items below, we do not store anything on your device until you have told us we may.
2. Strictly necessary
These are required for the service to work. They are exempt from consent under PECR regulation 6(4), because without them you could not sign in or stay signed in, and you cannot switch them off while using the product.
| Name | Purpose | Type | Expires |
|---|---|---|---|
| sb-access-token, sb-refresh-token | Keeps you signed in and lets your session refresh while you are active. Set by our authentication provider, Supabase. | Local storage | Session, and in any case 7 minutes after your last activity. |
| fplm-theme | Remembers whether you chose the dark or light theme, so the page does not flash the wrong colours before it loads. | Local storage | Until you clear it. |
| fplm-locale | Remembers whether you chose English or Arabic, including the reading direction of the page. | Local storage | Until you clear it. |
| fplm-last-active | Tracks the time of your last interaction so the 7 minute automatic sign out works consistently across open tabs. | Local storage | Cleared when you sign out. |
| fplm-consent | Remembers this cookie choice, so we do not ask again on every page. | Local storage | 12 months. |
3. Optional, and off by default
| Category | What it does | Default |
|---|---|---|
| Analytics | Aggregated counts of which pages get used, so we know what to improve. Not linked to you as an individual. | Off until you consent. |
| Preferences | Remembers softer choices such as dismissed tips and table layouts. | Off until you consent. |
| Marketing and advertising | We do not use any. We run no advertising cookies, no tracking pixels and no cross-site profiling, and we do not sell or share data for advertising. | Not used at all. |
4. Third parties
Signing in with Google sends you to Google, which sets its own cookies under its own policy. That only happens if you choose that sign-in method.
Web fonts are loaded from Google Fonts. That service sets no cookies, but it does receive your IP address as part of the request. We are moving to self-hosted fonts to remove that connection entirely.
We embed no advertising networks, no social media widgets and no session recorders.
5. How to change your mind
Open Settings and choose Manage cookies, or use the Cookie settings link in the footer of any page. Withdrawing consent is exactly as easy as giving it, which is what the law requires and what we would want as users ourselves.
You can also block or delete cookies in your browser settings. If you block the strictly necessary items, signing in will stop working.
We honour Global Privacy Control and similar automated opt-out signals where your browser sends them.
This document is published in English and Arabic. If the two versions differ, the English version governs.