Cookie Policy

The short version

This site sets no analytics, advertising or tracking cookies. Page views are counted by Vercel Web Analytics, which sets no cookies and cannot follow you between sites. The site does not use Google Analytics, a Meta pixel, or any other visitor-tracking service. The only cookie it sets itself is the sign-in session for people who have an account, and the only other things it stores in your browser are your cookie choice and a note of when you last saw the prompt on the home page.

The one third party that can set cookies is Calendly, inside the call-scheduling calendar. It loads only when you ask for it, or automatically on the contact page if you chose Accept in the banner.

What cookies and local storage are

Cookies are small text files a website places on your device and which your browser sends back on later visits. Local storage is a related mechanism that lets a site keep small amounts of information on your device without sending it anywhere. This site uses both, in the specific ways listed below.

Strictly necessary: set by this site

These are needed for the site to work as you would expect and do not require consent:

• Sign-in session (cookie, name beginning sb- followed by the project reference and auth-token, occasionally split into numbered parts): set by Supabase Auth only when you register or log in. It holds the tokens that keep you signed in to the client portal and is removed when you sign out. It is not set for visitors who do not have an account.
• Your cookie choice (local storage, zakri-cookie-consent): records whether you chose Accept or Necessary only, so the banner is not shown again. It stays on your device and is never sent to my servers.
• Home-page prompt marker (local storage, zakri-lead-popup): records when the invitation that appears on the home page was last shown, so it is not shown again for seven days. It contains a timestamp only.

Fonts are served from this site's own domain, so no request is made to a font provider. The hosting provider, Vercel, does not set any cookie on this site.

Third party: Calendly

The Schedule a call buttons and the calendar on the contact page are provided by Calendly. When the scheduler loads, Calendly's script runs from Calendly's servers and sets its own cookies inside the embedded calendar, under Calendly's own privacy and cookie policies, which are available at calendly.com. I do not control those cookies and do not receive them.

The scheduler never loads silently in the background. A Schedule a call button loads it only when you click it. On the contact page, the calendar loads automatically only if you chose Accept in the banner; otherwise you will see a Load the scheduler button, and clicking it is your consent for that page view. Choosing not to load it costs you nothing: you can message me on WhatsApp instead.

What the banner controls

Because the site sets no optional cookies of its own, the two banner choices differ in exactly one way. Accept lets the Calendly scheduler load automatically on the contact page. Necessary only means every third-party embed waits for your click. Both choices leave the strictly necessary items above in place.

If I ever add an optional tool that sets cookies, such as analytics, it will be listed on this page and will run only after Accept has been chosen. It will not be added quietly.

Changing your mind

Your choice is stored in your browser's local storage under the name zakri-cookie-consent. To change it, clear this site's data in your browser settings (usually under Privacy, Site data or Cookies and site data) and the banner will appear again on your next visit. You can also block or delete cookies for this site in the same place. Deleting the sign-in cookie simply signs you out.

Consent under the PDPL and other laws

Where the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL") applies, and where you visit from a country with its own cookie rules such as the EU, the UK or Switzerland, I rely on your consent for anything that is not strictly necessary, and you may withdraw it at any time as described above. How I handle the personal data involved is set out in the Privacy Policy.

Changes to this policy

I will update this page whenever the cookies or storage the site uses change, and the "last updated" date above will change with it.

Contact

Questions about cookies or browser storage can be sent to najeeb@districteight.co.