Cookie Policy
Version 1.0 - Last updated: October 28th 2026
1. WHAT THIS COVERS
Cookies are small text files a website stores on your device. Browser storage (localStorage and sessionStorage) works the same way and is covered here too.
Why this page exists. This page explains, in plain language, what small pieces of information this website stores on your device, why, and how you can control them. It works alongside the Privacy Policy, which explains what I do with personal data more generally.
Cookies and browser storage. A cookie is sent back to the site every time your browser asks for a page. Browser storage stays in your browser and is only read by the site's own code. For the purposes of this page they work in the same way, so I describe them together.
First-party and third-party. First-party means set by this site. Third-party means set by another company whose content appears on a page, such as an embedded video. This site sets only first-party items. Third-party content is covered in section 5.
How long they last. Some items disappear when you close your browser (called session items). Others last for a set time. The table in section 3 gives the lifetime of each one.
Consent. Items that are strictly necessary for the site to work do not need your consent. Anything else would, and the site currently uses nothing else. If that changes, I will ask you first.
2. THE SHORT VERSION
The site sets only the cookies and storage it needs to keep you signed in and remember your choices. Analytics uses no cookies. There are no advertising or tracking cookies, so there is no cookie banner. If that changes, this policy changes first.
3. STRICTLY NECESSARY (NO CONSENT NEEDED)
These items are needed for the site to work, so you cannot switch them off from here. They are set when you take an action, such as signing in. They are not used for advertising, and they do not follow you to other sites.
| Name | What it does | How long | Set when |
|---|---|---|---|
| sb-eoobmmupqdygujyaxifz-auth-token (cookie, may be split into parts) | Keeps you signed in (Supabase) | Browser session, or 30 days if you ticked Remember me | You sign in |
| sb-eoobmmupqdygujyaxifz-auth-token (localStorage or sessionStorage) | The same sign-in held in browser storage: localStorage if you ticked Remember me, sessionStorage if not | Until you sign out or clear it, or the browser tab closes | You sign in |
| sb-remember | Remembers whether you ticked Remember me | 30 days if ticked, browser session if not | You sign in |
| post_login_redirect | Returns you to the page you were on after Google sign-in | 5 minutes | You start Google sign-in |
If you block or delete these. You will be signed out and will not be able to sign in again until you allow them. Reading public pages is not affected.
4. ANALYTICS
I use Vercel Web Analytics to count visits. It sets no cookies. It records the page address, referrer, browser and device type and country, with an anonymous identifier that is discarded after 24 hours, so it cannot follow you across days or sites.
Why there is no cookie banner. A cookie banner is needed when a site uses cookies that require your consent, such as advertising or cross-site tracking. This site does not, so a banner would only be noise. Nothing is switched on in the background that you have not been told about.
Do Not Track. This site does not respond to "Do Not Track" signals from your browser. It does not need to: it uses no advertising trackers and its analytics do not follow you across sites.
If this changes. If I ever add anything that sets cookies which are not strictly necessary, I will update this policy and ask for your consent before it is switched on.
5. THIRD-PARTY CONTENT
| Content | What happens |
|---|---|
| Unsplash photos | Your browser fetches the image from Unsplash, which can see your IP address. No cookies set by this site. |
| YouTube videos | Videos use YouTube's privacy-enhanced domain (youtube-nocookie.com). YouTube sets no cookies until you press play. |
Other than these, the site does not embed videos, social feeds or advertising.
What these companies can see. When your browser fetches a photo from Unsplash or loads a YouTube video, that company can see your IP address and basic details about your browser, as with any website you visit. Their own privacy policies explain what they do with that information.
Links to other sites. If you click a link to another website, that site has its own cookies and privacy policy, which I do not control.
6. MANAGING COOKIES
You can block or delete cookies in your browser settings. If you block the strictly necessary ones you will not be able to sign in. Instructions for the most common browsers:
Cookies on a phone or tablet are managed in the browser app's settings.
Clearing what is already stored. Your browser can also delete cookies and site data that are already stored. Look for "cookies" or "site data" in the settings. If you clear the sign-in items listed in section 3, you will need to sign in again.
Other browsers. The links above cover the most common browsers. For others, such as Brave or Opera, look for "cookies" or "site data" in the settings menu.
Advertising choices. This site shows no ads and takes no part in interest-based advertising, so there is nothing to opt out of here. If you want to limit advertising tracking elsewhere on the web, you can use Your Online Choices (EU) or the Digital Advertising Alliance opt-out (US).
7. CHANGES AND CONTACT
I will update this policy if the cookies I use change. The date and version are on the cover. Questions: privacy@ivankabandize.com. See also the Privacy Policy.
Who is responsible. This policy is issued by Ivan Kabandize, who runs ivankabandize.com from Kampala, Uganda, and is the controller of the data described in the Privacy Policy.
Printing and more detail. You can print this page for your records using your browser's print command. If you would like more detail on any item listed here, ask me and I will explain.
8. WORDS USED IN THIS POLICY
Cookie. A small text file a website saves in your browser.
Browser storage. Space in your browser (localStorage and sessionStorage) where a site can keep small pieces of information. It is not sent to the site automatically.
Session. The time you spend in one visit. Session items are removed when you close your browser or tab.
Strictly necessary. Needed for the site to work, such as keeping you signed in. These do not need your consent.
First-party and third-party. Set by this site, or set by another company whose content appears on the site.
Tracker. A general word for any technology that stores or reads information on your device, including cookies and browser storage.
Questions: privacy@ivankabandize.com