Legal
Cookie Policy
Last updated
We only store what the site needs to work. There are no advertising, social media or tracking cookies, which is why you don't see a cookie banner: strictly necessary storage doesn't require consent.
1. What cookies and local storage are
Cookies and local storage are small pieces of data a website saves in your browser. Cookies are sent back to the website with each request; local storage stays on your device and is only read by the page itself.
2. Cookies we use
Cookies are only set when you sign in.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
sb-…-auth-token (may be split into .0, .1) | Supabase, on our domain | Keeps you signed in. Strictly necessary. | Until you sign out, or up to about 1 year |
sb-…-auth-token-code-verifier | Supabase, on our domain | Completes “Continue with Google” securely. Strictly necessary. | Removed once sign-in finishes |
If you choose Google sign-in, Google may set its own cookies on its sign-in pages under its own policy.
3. Local storage we use
| Key | Purpose | Duration |
|---|---|---|
holidaymaker-theme | Remembers whether you chose light or dark mode | Until you clear it |
holidaymaker-todo:… | Remembers which to-do items you ticked for a route, so they are still there next time | Until you clear it |
Both only store something after you use that feature, and neither is sent to us or anyone else.
4. Analytics
We count visits and page views with Cloudflare Web Analytics. It is cookie-free: it saves nothing on your device and doesn't recognise you between visits or across websites. More in our Privacy Policy.
5. How to control them
You can view and delete cookies and local storage in your browser settings at any time. If you block the sign-in cookie you won't be able to sign in; everything else on the site still works.
6. Changes
If we ever add cookies that aren't strictly necessary, we will ask for your consent before setting them and update this page. Questions? Email whconnectteam@gmail.com.