Cookies

Draft, not yet in force. This describes what the app actually does today, written against the code rather than from memory. It has not had a legal review and should not be relied on as a final policy until it has.

Why there is no banner

Because there is nothing to ask you about. We use no advertising cookies, no analytics, and nothing that follows you to another site. What is listed below is what the Privacy and Electronic Communications Regulations call strictly necessary: storage without which the thing you asked for cannot work. That kind is exempt from consent, and a banner asking for permission we do not need is how people learn to click yes without reading.

If that ever changes — if we add analytics, or anything that measures you rather than serves you — you will be asked first, properly, with a real choice and a working no.

What is stored

sb-…-auth-tokenA cookie set by Supabase, who run our sign-in. It holds the token that says this browser is signed in as you, sometimes split across two or three cookies when it is long.Without it you would be signed out on every page. There is no way to offer a signed-in account and not store this.Kept: Until you sign out, or until the sign-in expires and is not renewed. Signing out deletes it.
notice:…Not a cookie: one line in your browser's session storage, written when you close one of the explanatory notices inside the app.So a notice you have read and closed does not reappear on the next screen.Kept: Until you close the tab. It never reaches us — session storage is not sent with requests.

That is the complete list. We do not store anything else on your device, and nothing here is used to build a picture of you.

Maps

Map tiles are drawn by OpenStreetMap and fetched by your browser directly from them, the same as visiting their site. They set no cookie for us, but they can see your network address and which part of the map you are looking at. This is the only third party your browser talks to while using the app.

Turning them off

Every browser lets you block or delete cookies, and you can do it for this site alone. Blocking ours does not break anything you can read while signed out — the marketing pages, this one, the privacy notice — but it makes signing in impossible, because staying signed in is the entire job of the one cookie we set.

Asking

Write to hello@thecollectivelocal.co.uk. The same address handles anything about your data, and the privacy notice covers what we hold on our side and for how long.