Legal
Cookie Policy
Last updated: September 26, 2026
The public website sets no cookies at all. The only cookies we use are the ones that keep people signed in to the private client portal and admin area.
What cookies are
A cookie is a small text file a website asks your browser to keep. The browser sends it back on your next visit, so the site can remember something, such as the fact that you are signed in. Cookies can also be used to follow people around the web for advertising. We don't do that.
The public website sets none
When you browse Ikaevo's public pages (the home page, our packages, articles, free tools, and pages like this one), we don't put any cookie in your browser. There are no advertising cookies, no tracking cookies, and no cookies from social media or ad networks. That is why you don't see a cookie banner here.
We also don't store anything else in your browser while you browse, with three exceptions, all ones you control. If you use the switch below to stop us counting your visits, your browser remembers that choice (as ikaevo_analytics_optout in its local storage) so we can keep honouring it. If you press the button that pauses or plays the moving background on our home page, your browser remembers that too (as ikaevo_hero_video), so it stays the way you left it. If you switch the site to dark mode with the sun and moon button, your browser remembers that as well (as ikaevo-theme). None of these is sent to us. If you try the client portal demo, the tab's session storage also notes that you have seen its short tour (as ikaevo-demo-tour-seen), and your browser clears that when you close the tab.
Cookies we can set, all strictly necessary
These are only ever set for people who sign in: our clients, in the private client portal, and the site owner, in the admin area. They exist only to keep you signed in and to remember a setting you chose. They are strictly necessary for those areas to work, which is why they don't need a consent choice. Signing out removes the sign-in cookie.
ikaevoai_admin
- What it does
- Keeps the site owner signed in to the private admin area. It is checked on every admin page so no one else can get in.
- Who gets it
- Only the site owner, when signed in to the admin area. Never set for visitors or clients.
- How long it lasts
- 24 hours
- Type
- Strictly necessary
ikaevoai_copy_preview
- What it does
- Lets the site owner preview wording changes on the real page before publishing them. On its own it shows nothing: the page also checks the admin sign-in.
- Who gets it
- Only the site owner, while previewing a change. Never set for visitors or clients.
- How long it lasts
- 1 hour
- Type
- Strictly necessary
sb-<project>-auth-token
- What it does
- Keeps a client signed in to the private client portal after they use their sign-in link or code. It comes from Supabase, the service that runs portal sign-in, and <project> stands for our Supabase project's id. When the sign-in details are large, they are split across a few cookies with .0, .1 and so on added to the name.
- Who gets it
- Only clients who sign in to the client portal.
- How long it lasts
- Up to 400 days, or until you sign out
- Type
- Strictly necessary
ikaevo_portal_theme
- What it does
- Remembers whether a client chose the light or dark look for the portal, so the page opens in the right colours.
- Who gets it
- Only portal clients who use the light or dark switch.
- How long it lasts
- 1 year
- Type
- Strictly necessary
ikaevoai_portal_project
- What it does
- Remembers which project a client last opened in the portal, for clients with more than one project.
- Who gets it
- Only portal clients who switch between projects.
- How long it lasts
- 1 year
- Type
- Strictly necessary
Services run by other companies
- Portal sign-in check (Cloudflare Turnstile). When it is switched on, the portal sign-in page shows a short check from Cloudflare that stops automated sign-in attempts. It runs in Cloudflare's own frame on that one page, never on the public pages. We don't set a cookie for it. Cloudflare says Turnstile does not use cookies to track visitors. Anything it does is covered by Cloudflare's privacy policy.
- Paying an invoice by card (Stripe). When a client pays through Stripe, they leave our site for Stripe's own secure checkout page. Stripe sets its own cookies there, for example to keep the payment secure and prevent fraud. Those are Stripe's cookies, on Stripe's website, and we can't see or change them. See Stripe's cookie policy.
Analytics without cookies
To understand which pages are useful, we count visits to the public website without cookies. Two tools do this:
- PostHog (PostHog, Inc., using its US cloud), in its cookieless mode. Our website sends the counts to PostHog through our own web address, so your browser doesn't connect to PostHog directly.
- Our own page counter, plus the cookieless analytics and speed measurements built into Vercel, our hosting provider.
What is collected:
- Which pages are viewed, and when.
- The website you came from, if your browser shares it.
- Your rough device type and browser, and an approximate country worked out from your internet address.
- Clicks on buttons and links, and when a form is sent.
- How far down a page you scroll.
What is not collected or stored:
- No cookies, and nothing saved in your browser's storage.
- No personal profile. We can't tell who you are, and your visits are not linked together over time. PostHog uses your internet address and browser details, on its own servers, to make a scrambled code that changes every day and to estimate your country. We have set PostHog not to store the address itself.
- No recordings of your screen or of what you type. What you type into a form is never read by the analytics.
- No analytics inside the client portal or the admin area. PostHog and Vercel's page counter and speed check run only on the public pages, so portal page loads are not counted. Vercel's tools are also switched off while the site owner is signed in.
How to opt out
You have three easy ways, and any one of them is enough:
- Use the “Don't count my visits” switch below.
- Turn on Global Privacy Control in your browser or a privacy extension. We treat it as a request not to count your visits.
- Turn on “Do Not Track” in your browser settings. We honour that too.
Your choices
This setting is saved only in this browser. If you use another browser or device, or clear your browsing data, set it again there.
Don't count my visits
Visit counting
A question about cookies?
Email us at info@ikaevo.ai and we'll get back to you. For everything else about your information, read our privacy policy.