Legal
Cookies
01 Draft for legal review
Cookie Policy
DRAFT. Owner: [name, role] · Last reviewed: [date] · Built from a search of the website code (October 2026) for cookies and browser storage. Counsel to review together with the Privacy Policy.
What we use
The website, Portal and TAC Admin set no advertising or analytics cookies. TAC's own website statistics (no third party) set no cookies. When they are switched on, the public website keeps one item in your browser's session storage: tac-insights-session, a random number that groups the pages you view in one tab and is deleted when you close the tab. It is not used on the Portal or in TAC Admin, and nothing is recorded if your browser sends Do Not Track or Global Privacy Control. See the Privacy Policy for what is recorded. [Counsel: confirm whether session storage for statistics needs consent.]
Our own code doesn't set any cookies. We use the browser's local storage and session storage (which stay on your device) for the following:
| Name | Type | Set by | Purpose | How long |
|---|---|---|---|---|
| sb-<project>-auth-token | Local storage | Supabase sign-in (Portal and TAC Admin) | Keeps you signed in; strictly necessary | Until you sign out or the session ends |
| tac-admin:session, tac-portal:session | Local storage | TAC sign-in | A copy of your roles so pages open quickly (always re-checked with the server) | Until sign-out |
| tac-admin:lockout, tac-portal:lockout | Local storage | TAC sign-in | Pauses sign-in for 15 minutes after 5 failed attempts (security) | 15 minutes |
| tac-admin:flash, tac-portal:flash | Session storage | TAC sign-in | Shows one message after sign-out (for example "You signed out") | Until the tab closes |
| tac-portal:pending-verification | Session storage | Portal registration | Remembers the email waiting for confirmation | Until the tab closes |
| tac-portal:last-dashboard | Local storage | Portal | Opens the dashboard you used last | Until cleared |
| tac-theme-mode | Local storage | Public website | Remembers light or dark mode | Until cleared |
| tac-cookie-notice | Local storage | Public website | Remembers that you closed the cookie notice | Until cleared |
| Portal application draft (use-local-draft) | Local storage | Portal application form | Saves your unfinished application on your own device | Until submitted or cleared |
Third parties your browser contacts
Some pages load content from other services, which receive your IP address and browser details under their own policies:
- Google Fonts: every page (typeface).
- OpenStreetMap tile servers: Network map pages only.
- YouTube (privacy-enhanced domain where used), Vimeo or Spotify: only on pages with an embedded video or podcast. The embedded player may set its own cookies when you play it.
Your choices
You can clear local storage and cookies in your browser settings. Clearing the sign-in item signs you out.
Last updated: [date]
Cookies and similar storage in use now
This list is generated automatically from the services switched on for this website, so it is always current. You can change your choices at any time with "Cookie settings" at the bottom of every page.
Loading…