Cookie Policy
Effective date: 2026-07-08
What cookies and similar tracking technologies RealTours uses on www.realtoursai.com, why we use them, and how you can control them. This policy supplements our Privacy Policy.
This Cookie Policy explains what cookies and similar tracking technologies RealTours (Pty) Ltd ("RealTours", "we", "us") uses on www.realtoursai.com, why we use them, and how you can control them. It supplements our Privacy Policy.
1What cookies are
Cookies are small text files stored in your browser when you visit a website. They let the site remember information about your visit (for example, that you're signed in) so the experience is faster and safer on your next visit. Some cookies are set by the website you're visiting (first-party); others are set by a third-party service the site uses (third-party).
2Cookies we currently set
RealTours sets essential cookies (necessary for the platform to work, without them you cannot sign in, your session would reset on every page load, and our security protections would be weaker) and, only if you accept analytics in the cookie banner, Google Analytics cookies that help us understand how the site is used. POPIA and GDPR do not require opt-in consent for essential cookies, but we list everything here for transparency.
| Cookie name | Set by | Purpose | Type | Duration |
|---|---|---|---|---|
sb-<project-ref>-auth-token | Supabase (first-party) | Authentication session: keeps you signed in across page loads | Essential | Until you sign out, or 7 days, whichever is sooner |
sb-<project-ref>-auth-token.0, …token.1, … | Supabase (first-party) | Sharded auth-token storage (long tokens split across multiple cookies) | Essential | Same as above |
__cf_bm | Cloudflare (third-party) | Bot-management: distinguishes humans from automated traffic to protect against abuse | Essential | 30 minutes after your last request |
cf_clearance | Cloudflare (third-party) | Marks your browser as having passed a Cloudflare security challenge | Essential | 30 days |
rt-cookie-consent(localStorage, not technically a cookie) | RealTours (first-party) | Remembers your cookie-banner choice (accept analytics, or essential only) so we don't ask on every visit | Essential | Until you clear browser storage |
_ga, _ga_<container-id> | Google Analytics (third-party) | Analytics: distinguishes visitors and measures how pages are used, so we can improve the product. Set only after you accept analytics in the cookie banner. | Analytics (opt-in) | Up to 2 years |
The exact Supabase cookie name depends on the project, replace <project-ref> with the project identifier visible in the cookie name set in your browser.
3Cookies we do NOT currently set
Non-essential cookies are governed by an opt-in consent banner: on your first visit you can choose "Accept analytics" or "Essential only", nothing is pre-ticked, and analytics never loads unless you actively accept it. You can change your mind at any time by clearing the rt-cookie-consent entry in your browser storage (the banner will ask again on your next visit).
4Third-party cookies inherited from our hosting provider
Our frontend is hosted at realtours.lovable.app and served through Cloudflare on www.realtoursai.com. The hosting provider's upstream content delivery network injects a small bot-management script (~flock.js) into every HTML response for fraud protection. Our site's Content Security Policy blocks this script from running in your browser, so it has no functional effect, but you may see a related cookie set by the upstream Cloudflare zone. We do not control this cookie and do not receive data from it.
5How to control cookies
You can refuse, restrict, or delete cookies in your browser's settings:
- Chrome: Settings → Privacy and security → Third-party cookies.
- Firefox: Settings → Privacy & Security → Cookies and Site Data.
- Safari: Settings → Privacy → Manage Website Data.
- Edge: Settings → Cookies and site permissions → Manage and delete cookies.
Disabling the essential cookies listed in section 2 will prevent you from signing in and will break core platform functionality. Disabling essential cookies is not something RealTours can avoid. It is a property of how authentication on the web works.
You can also use your browser's private browsing or incognito mode, which automatically clears cookies when the window is closed.
6Our commitment if cookies change
If, in future, RealTours adds any further non-essential cookie (advertising, social, additional analytics or preference tools), we will:
- Update this Cookie Policy with the new cookie listed in section 2.
- Keep every non-essential category defaulted to off in the consent banner, setting it only after you actively opt in.
- Provide a persistent way for you to withdraw consent at any time.
7Changes to this policy
If we make material changes to this Cookie Policy we will post a notice on the platform at least 14 days before the changes take effect. The effective date at the top of this page indicates the latest revision.
8Contact
Questions about cookies on RealTours? Email privacy@realtoursai.com.
Last updated: 2026-07-08 · Questions? privacy@realtoursai.com