Overview
This policy explains the cookies and similar technologies currently used on the Nine Sharks website. It is based on a code and dependency audit completed on 28 September 2026. The site currently keeps technology use deliberately limited.
Current cookies and similar technologies
| Technology | Purpose | Current status |
|---|---|---|
| Supabase admin authentication cookies | Maintain an authorised administrator session after sign-in to the protected admin area. | Active only for authorised /admin users; not part of ordinary public browsing. |
| RFQ success reference session storage | Temporarily carries an RFQ reference and safe persistence status from a successful submission to the success page, then removes both values. It does not store RFQ form details. | Active only after a successful RFQ submission; cleared by the success page or when the browser session ends. |
| Cloudflare Turnstile | Helps distinguish human Contact and RFQ submissions from automated abuse using browser and security signals. It is not used to read form field entries. | Integrated for the Contact form and RFQ final submission step. Production keys remain pending. No Turnstile pre-clearance has been configured. |
What we do not currently use
The public browsing journey does not include active analytics, advertising pixels, behavioural tracking, marketing tags, session replay, chat widgets, external video embeds or a cookie-consent platform. A Supabase browser client is used only by the protected admin sign-in. A first-party page-view feature is disabled by default pending privacy review. The application captures limited UTM and referrer context in RFQ page memory for the submitted enquiry; it does not keep that context in browser storage.
Consent decision
Based on the current audit, Nine Sharks has not introduced a cookie banner. There is no current non-essential analytics, advertising, behavioural tracking or personalisation technology that needs a consent choice. This decision must be reviewed before any non-essential cookie or similar technology is introduced. Consent management must be put in place before that technology is activated.
Turnstile and security
Turnstile is a Cloudflare security and anti-abuse service used at RFQ submission. It processes browser and security signals to help distinguish people from automated traffic. The current integration does not enable pre-clearance, so this policy does not describe a cf_clearance cookie as active for Nine Sharks.
Your choices and changes
You can manage browser storage through your browser settings. Clearing session storage before the RFQ success page is shown may prevent the temporary reference from being displayed there. We will update this policy and, where required, provide an appropriate choice mechanism before adding non-essential technology.