Cookie Policy (draft)

What we use

We set only first-party cookies that are needed for the site to work. None is used for advertising or tracking.

Session cookie — keeps you signed in between page loads. It expires after a period of inactivity and cannot be read by scripts in your browser.
XSRF-TOKEN — a security token that lets the site check that a form submission, such as a sign-in or a contact message, really came from you.
Language cookie — remembers whether you chose Arabic or English, so the site opens in that language next time.

What we do not use

No advertising cookies, no third-party tracking cookies and no analytics cookies: page analytics work without setting anything in the visitor's browser. The newsletter box and the contact form set no cookies of their own.

Managing cookies

Your browser can block or delete cookies. Because the session and security cookies are needed to sign in and to send forms, blocking them will stop you from using an account or sending the contact form, though public pages remain readable.

Still to be decided before launch

Whether a consent banner is required depends on the jurisdictions the service operates in. Strictly necessary cookies are commonly exempt, but this should be confirmed before launch.