Cookie Policy

1. What cookies are

Cookies are small text files stored on your device when you visit a website. They let a site remember things like whether you are signed in. Some are essential for the site to work; others are optional and only set with your consent.

2. Categories we use

Strictly necessary, required for the site to function and stay secure (keeping you signed in, protecting against bots). These do not need consent.
Analytics (optional), help us understand which pages are useful. These are set only after you accept them in the cookie banner. Decline and they are never set.

We do not use preference, advertising, or marketing cookies.

3. The cookies in detail

Cookie	Provider	Purpose	Lifetime	Category
sb-*-auth-token	Supabase	Keeps you signed in and manages your session	Session / until sign-out	Strictly necessary
__cf_bm	Cloudflare	Distinguishes humans from bots, protects the site	~30 minutes	Strictly necessary
_ga	Google Analytics	Distinguishes visitors (set only if you accept)	2 years	Analytics (optional)
_ga_<id>	Google Analytics	Maintains analytics session state (set only if you accept)	2 years	Analytics (optional)

Google Analytics may set additional related cookies (for example _gid). All analytics cookies are blocked until you accept them.

4. Related browser storage

For transparency, we also use two items in your browser's local storage, which are not cookies and are never sent to advertisers:

kelo.analytics-consent, remembers your cookie choice so we do not ask again.
kelo_sid, a random first-party identifier used to group anonymous product analytics from your device. It contains no personal data.

5. How we ask for consent

Under UK PECR, non-essential cookies need your consent before they are set. So Google Analytics does not run until you choose "Accept" in our cookie banner. If you decline, or ignore the banner, no analytics cookies are set. You can change your mind at any time by clearing the choice in your browser, and the banner will ask again.

6. Managing cookies in your browser

You can delete or block cookies through your browser settings. Blocking the strictly-necessary cookies may stop you from staying signed in. For guidance, see your browser's help pages or the ICO's advice on cookies.

7. More information

For how we handle personal data more broadly, see our Privacy Policy and Data Processing terms. Questions? Email [email protected].