Cookie Policy
Last updated: 23 August 2026
1. What cookies are
Cookies are small files stored on your device by your browser. Some are needed to make a website work at all; others are optional and help us understand how the site is used.
Under PECR we may set strictly necessary cookies without asking. Anything else — including analytics — requires your consent first, and we do not load it until you give that consent.
2. Strictly necessary cookies
These keep you signed in and protect the service. They cannot be turned off, because the portal will not function without them.
| Cookie | Provider | Purpose | Expiry |
|---|---|---|---|
| sb-<project>-auth-token | Supabase (via CuraFlow) | Keeps you signed in across the CuraFlow suite. Set on .curaflow.net so a single sign-in covers Policies, Compliance, Care and Registration. | Session / until sign-out |
| cf_consent | CuraFlow | Remembers the cookie choice you made on this banner, so we do not ask again on every page. | 6 months |
3. Analytics cookies (optional)
These load onlyif you choose “Accept all”. If you choose “Essential only”, the scripts are never sent to your browser at all.
| Cookie | Provider | Purpose | Expiry |
|---|---|---|---|
| Vercel Web Analytics | Vercel Inc. | Aggregated page-view counts, so we can see which pages are useful. No cross-site tracking and no advertising profile. | 24 hours |
| Vercel Speed Insights | Vercel Inc. | Measures real-world page load performance so we can fix slow pages. | 24 hours |
4. Similar technologies
We also use your browser’s local and session storage for two strictly necessary conveniences: remembering that you dismissed the WhatsApp greeting, and remembering that you dismissed a promotional notice. These stay on your device and are never sent to us.
5. Changing your mind
Withdrawing consent is as easy as giving it. Use the button below, or the “Cookie settings” link in the footer of any page. Your choice applies across the whole CuraFlow suite.
You can also block or delete cookies in your browser settings, though the portal will not keep you signed in if you block the necessary ones.
6. Complaints
If you are unhappy with how we handle cookies or personal data you can complain to the Information Commissioner’s Office at ico.org.uk. We would appreciate the chance to put things right first — contact us at curacompliance@gmail.com.