POLICY · LAST UPDATED 4 AUGUST 2026
Cookies and local storage
This page lists everything Iudara stores on your device, what it is for, and how to change it. It is a full enumeration taken from the code rather than a generic notice — if you find something on your device from us that is not listed here, please tell us.
The short version
Browsing our public pages sets no cookies from us. Signing in sets the session cookies that keep you signed in. We use a small amount of browser local storage to remember your choices. We run our own analytics on the marketing pages, but only if you accept — nothing is loaded until you do, and you can change your mind at any time.
Cookies we set
Our public pages — the home page, jurisdictions, about, contact, and these legal pages — set no first-party cookies. Cookies appear only once you sign in to the platform.
| Cookie | Purpose | Lifetime |
|---|---|---|
| sb-…-auth-token (and numbered continuations such as .0, .1) | Your authentication session, set by our authentication provider's library. This is what keeps you signed in between page loads. It is strictly necessary — the platform cannot work without it. | Up to 400 days, refreshed as you use the platform; cleared on sign-out |
| sb-…-auth-token-code-verifier | A short-lived value used during sign-in to complete the login exchange securely. | The duration of the sign-in flow |
Both are set for our own domain with SameSite=Lax, so they are not sent on cross-site requests. We do not set advertising, tracking, or cross-site cookies, and we do not allow third-party advertising cookies on our domain.
Local storage we use
These are stored by your browser and never sent to our servers. Clearing your browser's site data removes them.
| Key | What it holds | Where |
|---|---|---|
| iudara:consent:v1 | Your answer to the cookie banner, so we stop asking. | Public site |
| iudara:tweaks:v1 | Your display preferences — theme, accent colour, typeface pairing, and density. | Public site |
| iudara:sidebar:admin:collapsed:v1, iudara:sidebar:client:collapsed:v1 | Whether you last left the navigation sidebar collapsed or expanded. | Signed-in platform |
Analytics
We run our own Umami installation on our own infrastructure to see which pages are useful. It runs on the public marketing pages only — the signed-in platform is deliberately not measured, so nothing you do inside your workspace is analytics data.
Analytics is off unless you turn it on. The script is loaded only after you choose Accept on the cookie banner, or allow analytics using the control below. Until you do — and again immediately if you decline or later change your mind — it is not loaded at all. Whether the script itself stores anything on your device once it does load is a property of the analytics software rather than of our site: [to be confirmed: confirmation from the analytics deployment of whether it sets cookies or uses local storage, its data retention, and whether IP addresses are stored or hashed].
Third-party scripts
| Provider | When it loads | What it may store |
|---|---|---|
| Cloudflare Turnstile | On our contact form and jurisdiction finder, to tell people from bots without a puzzle to solve. | [to be confirmed: Turnstile's own client-side storage behaviour] |
| Calendly | Only if you click to open the booking widget on the contact page. Nothing loads until you do. | [to be confirmed: Calendly's own cookie behaviour] |
| Our error tracker | On every page, to report faults. Error reports are routed through our own domain rather than to a third-party origin. | No cookies; error and performance data only |
Your choices
Analytics starts off. You can turn it on, and turn it back off, at any time using the control below — withdrawing agreement is as easy as giving it. You can also block or delete cookies in your browser settings; blocking the session cookies will stop you being able to sign in.
Changes
The date at the top of this page shows when this list last changed. We update it whenever we add or remove something that touches your device.
Your analytics choice
Your choice is stored in this browser only, under the key iudara:consent:v1. Clearing your site data resets it, and you will be asked again.