Legal
Cookie policy.
What cookies and tracking technologies we use, and your choices. Last updated August 2026.
1. Introduction
Havnwright LTD uses cookies and similar tracking technologies on our platform at havnwright.com. This Cookie Policy explains what cookies are, how we use them, and your choices regarding cookies.
This policy complies with UK GDPR and the Privacy and Electronic Communications Regulations (PECR).
2. What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help:
- Remember your preferences and settings
- Keep you signed in where accounts are used (the admin area)
- Understand how you use our platform
- Improve your experience
Types of Cookies
- Session Cookies: Temporary, deleted when you close your browser
- Persistent Cookies: Remain until expiry or manual deletion
- First-Party Cookies: Set by Havnwright directly
- Third-Party Cookies: Set by external services (e.g., analytics)
3. Cookies We Use
3.1 Essential Cookies
Required for core functionality and cannot be disabled. The public website is account-less, so for a normal visitor the only thing we store is your cookie-consent choice (see below). The authentication and CSRF cookies in the table below are set only when an administrator signs into the admin area, not during general browsing.
| Cookie | Purpose | Duration |
|---|---|---|
| sb-*-auth-token | Supabase authentication session (admin sign-in only). The * is replaced with our Supabase project reference. | Session (refreshed on activity) |
| CSRF token cookie | Cross-site request forgery protection on signed-in (admin) mutations. | Session |
We also store your cookie preference in your browser's local storage under the key havnwright_cookie_consent. This is not a cookie, but functions similarly: it remembers your choice so the consent banner does not reappear on every visit. See section 5 for more on local storage.
3.2 Analytics Cookies (Consent Required)
Help us understand how visitors use the platform. These only load if you click Accept All on the cookie banner. If you choose Essential Only or have not yet made a choice, no analytics cookies are set.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics | Distinguishes unique visitors | 2 years |
| _ga_* | Google Analytics | Persists session state for the property | 2 years |
| _gid | Google Analytics | Distinguishes unique visitors within a session | 24 hours |
| _vercel_* | Vercel Analytics | Aggregated page-view analytics provided by our hosting platform. | Session |
| ph_*_posthog | PostHog (EU) | Distinguishes unique visitors and remembers their session state so we can see which pages and tools are used. Data is processed on PostHog's EU servers. | 1 year |
3.3 Marketing Cookies
We do NOT currently use marketing or advertising cookies, and we do NOT share data with third-party advertising networks. If this changes in the future, we will update this policy and request your consent before setting any such cookies.
4. Your Cookie Choices
4.1 Cookie Consent Banner
When you first visit our platform, you'll see a cookie banner allowing you to:
- Accept All: Enable all cookie categories
- Essential Only: Only essential cookies are used
4.2 Change Preferences
You can update your cookie preferences anytime by:
- Clicking "Cookie Settings" in the website footer, which reopens the consent banner so you can change or withdraw your choice
- Emailing privacy@havnwright.com
If you withdraw analytics consent, we stop analytics collection, delete the analytics cookies and local storage entries we set, and reload the page so no analytics scripts remain active.
4.3 Browser Controls
Most browsers allow you to control cookies:
- Chrome: Settings → Privacy and Security → Cookies
- Firefox: Settings → Privacy & Security → Cookies
- Safari: Preferences → Privacy → Cookies
- Edge: Settings → Cookies and site permissions
Note: Blocking all cookies may affect platform functionality, including login and saved preferences.
4.4 Opt-Out Tools
- Your Online Choices (UK): youronlinechoices.com
5. Local Storage
In addition to cookies, we use your browser's local storage for a small number of specific purposes. Unlike cookies, local storage values are never sent back to our servers automatically: they stay on your device and we read them only when the relevant page is open.
havnwright_cookie_consent: remembers whether you accepted all cookies or only essential ones, so the consent banner does not reappear on every page load. Value is eitheracceptedoressential_only.- Cached application data for faster page loads (queries, settings, draft form contents).
- PostHog analytics state (keys starting
ph_): present only if you clicked Accept All. Mirrors the analytics cookie so visits are counted consistently. Never created if you chose Essential Only. - Error-diagnostics session replay (Sentry): if you clicked Accept All, a temporary session storage entry named
sentryReplaySessionmay exist while an anonymised replay sample is recording. Replay never runs if you chose Essential Only; error reporting itself works without it.
Local storage data remains on your device until you clear your browser data or manually remove it.
6. Third-Party Cookies
Some features may set third-party cookies:
6.1 Supabase (Authentication)
Our authentication provider sets cookies to manage the session when an administrator signs in. General website visitors are not signed in and do not receive these cookies.
6.2 Embedded Content
If we embed videos (YouTube) or other content, those platforms may set their own cookies. We use privacy-enhanced mode where available.
7. Do Not Track
We respect your Cookie Consent Banner choices. While there's no universal "Do Not Track" standard, rejecting analytics cookies will prevent tracking.
8. Updates to This Policy
We may update this Cookie Policy to reflect changes in our practices. When we do:
- We'll update the "Last Updated" date
- Material changes may require new consent
9. Contact Us
For questions about cookies:
- Email: privacy@havnwright.com
10. Cookie Summary
| Category | Purpose | Consent | Can Disable |
|---|---|---|---|
| Essential | Site functionality, login, security | Not required | No |
| Analytics | Usage tracking (Google Analytics, Vercel, PostHog) and Sentry session replay | Required | Yes |
| Marketing | Not currently used | Required if introduced | Yes |