Cookie Policy

This Cookie Policy explains what cookies and similar local-storage technologies Ink Deposit (operated by InkDeposit SA (Pty) Ltd) uses, why we use them, and how you can control them. It supplements our Privacy Policy.

1. What Cookies Are

Cookies are small text files placed on your device when you visit a website. We also use equivalent browser storage (localStorage, sessionStorage) for some of the same purposes. Throughout this policy, "cookies" refers to both.

2. Cookies We Actually Use

Ink Deposit does not run advertising cookies or third-party tracking pixels. If you are only browsing, we set nothing at all — no cookie and no browser storage is created until you sign in or start a booking. The table below lists every cookie and storage key the platform can set:

• sb-<project>-auth-token

  Supabase authentication session — keeps you signed in. Created only once you sign in.

  Essential · Refreshed while you stay signed in; cleared when you sign out

• ink_booking_email (session storage)

  Remembers the email address you booked with, so returning to your booking page does not ask for it again

  Essential · Until you close the tab

• inkd_scroll_position (session storage)

  Puts your artist dashboard back where you left it after a refresh

  Optional · Until you close the tab

• inkdeposit_errors (local storage)

  Keeps the last few error messages on your own device so a problem can be diagnosed if you report it. Not transmitted on its own.

  Optional · Until you clear site data

3. Why We Use Them

• —Essential: Required for login, booking, and payment to function at all. These cannot be disabled without breaking the platform.
• —Functional: Put you back where you were — your place on a long dashboard, the email you already typed. None of it identifies you and none of it leaves your device.
• —Fraud prevention: When a sign-in attempt looks automated, Cloudflare Turnstile asks the browser to prove it is a real one. It does not track you across other sites.

We do not use cookies for advertising, cross-site tracking, or building an advertising profile of you.

4. Third-Party Cookies

• —Cloudflare Turnstile: May set its own cookie during the challenge check. See cloudflare.com/privacy.
• —PayFast: When you are redirected to PayFast to pay a deposit, PayFast's own cookies apply on their domain — we do not control these. See payfast.io.
• —OpenStreetMap: Our maps are drawn with OpenStreetMap tiles. Loading a map requests image tiles from openstreetmap.org, which receives the area of the map you are looking at. See openstreetmap.org/copyright.
• —QR code service: The QR code on your booking confirmation is generated by api.qrserver.com, which receives your booking reference in order to draw it. Nothing else is sent.
• —Google Maps (only if you tap it): An artist may add a link to their studio’s Google listing. Nothing is sent to Google until you follow it, and the link is marked so Google is not told which profile you came from. Once there, Google’s own cookies and policies apply.

5. How to Control Cookies

You can control or delete cookies through your browser settings:

• —Chrome: Settings → Privacy and security → Cookies and other site data
• —Safari: Preferences → Privacy → Manage Website Data
• —Firefox: Settings → Privacy & Security → Cookies and Site Data
• —Edge: Settings → Cookies and site permissions

6. Changes to This Policy

If we add a new cookie or tracking technology, we will update this page and, where the change is material, notify users as described in our Privacy Policy.

7. Questions

Contact our Information Officer at dpo@inkdeposit.com for any questions about cookies or this policy.