Cookie & Browser Storage Policy
Last revised: 8 September 2026
What this disclosure covers
Cookies are small values stored by a browser and sent with matching requests. localStorage is separate browser storage accessed by scripts on the same site. This website’s own public application does not set cookies, and no analytics, advertising pixels or marketing trackers are included in its current code. Functional display storage: emmy_motion_home_seen in sessionStorage contains the fixed value "1" after Home is opened, so later Home entrances during the browser page session use a shorter animation. It survives page reloads for that session and can be reset by clearing site storage. This value is UI state, not an analytics, advertising, profiling or tracking identifier. Third-party security and sign-in services may have their own storage behavior.
Language preference
Preference storage: emmy_language in localStorage contains en or ar when you explicitly change the website language. It remembers that choice between visits and has no automatic expiry in the application. You can change the language again or clear this site’s storage in your browser. The site defaults to English if no valid preference is available; it does not infer language from your location.
Private Admin authentication
Authentication storage: the Admin area uses the Supabase browser client with persistent sessions and the PKCE sign-in flow. Project-specific sb-…-auth-token entries and associated verifier/session entries can store authentication state and tokens in localStorage. They are not customer booking storage or advertising identifiers. Signing out or clearing storage removes local authentication state; token/session expiry and provider settings also affect the session. Google and Supabase may use storage on their own sign-in domains. Public visitors do not need an Admin account.
Security checks
Security processing: Cloudflare Turnstile loads from challenges.cloudflare.com to help prevent automated abuse. Its default verification uses a token. A cf_clearance cookie is associated with optional pre-clearance; its presence and lifetime depend on Cloudflare settings and are not established by this repository. Cloudflare may use additional challenge-related mechanisms under its own policy. We do not list those optional cookies as confirmed site cookies. Blocking security resources can prevent a booking request from being submitted.
Memory and external services
Chat history, booking drafts and dismissal of the assistant greeting are held in the current page’s memory, not persisted as cookies or localStorage. Loading Google Fonts is an external resource request, not an analytics feature added by this site. WhatsApp and Google sign-in are external services whose own cookies or storage may apply when you use them. See the Privacy Policy for the information transmitted to providers.
Your controls and future changes
You can review, block or clear cookies and site storage in browser settings. Clearing language storage resets the preference; clearing Admin storage can sign you out. Because the current application has no non-essential analytics or advertising storage, it does not display an analytics/marketing consent banner. This is a description of the implementation, not a declaration of legal compliance. Any future analytics, advertising or embedded social tracking must be reviewed before activation and appropriate consent controls added where required. For questions, use the WhatsApp Emmy contact link.
Cloudflare Privacy · Google Privacy · Supabase Privacy · Netlify Privacy