Cookie Policy
Effective date: {{PLACEHOLDER_EFFECTIVE_DATE}}
What cookies and similar tracking technologies RealTours uses on www.realtoursai.com, why we use them, and how you can control them. This policy supplements our Privacy Policy.
This Cookie Policy explains what cookies and similar tracking technologies {{PLACEHOLDER_LEGAL_NAME}} ("RealTours", "we", "us") uses on www.realtoursai.com, why we use them, and how you can control them. It supplements our Privacy Policy.
1What cookies are
Cookies are small text files stored in your browser when you visit a website. They let the site remember information about your visit (for example, that you're signed in) so the experience is faster and safer on your next visit. Some cookies are set by the website you're visiting (first-party); others are set by a third-party service the site uses (third-party).
2Cookies we currently set
RealTours currently sets essential cookies only. These are necessary for the platform to work — without them you cannot sign in, your session would reset on every page load, and our security protections would be weaker. POPIA does not require opt-in consent for essential cookies, but we list them here for transparency.
| Cookie name | Set by | Purpose | Type | Duration |
|---|---|---|---|---|
sb-<project-ref>-auth-token | Supabase (first-party) | Authentication session — keeps you signed in across page loads | Essential | Until you sign out, or 7 days — whichever is sooner |
sb-<project-ref>-auth-token.0, …token.1, … | Supabase (first-party) | Sharded auth-token storage (long tokens split across multiple cookies) | Essential | Same as above |
__cf_bm | Cloudflare (third-party) | Bot-management — distinguishes humans from automated traffic to protect against abuse | Essential | 30 minutes after your last request |
cf_clearance | Cloudflare (third-party) | Marks your browser as having passed a Cloudflare security challenge | Essential | 30 days |
rt-cookie-notice-dismissed(localStorage, not technically a cookie) | RealTours (first-party) | Remembers that you dismissed the cookie notice banner so we don't show it on every visit | Essential | Until you clear browser storage |
The exact Supabase cookie name depends on the project — replace <project-ref> with the project identifier visible in the cookie name set in your browser.
3Cookies we do NOT currently set
If this ever changes, we will update this policy and switch to an opt-in consent banner — you will see a consent prompt on your next visit, and any non-essential cookie will only be set after you actively accept it. We will not pre-tick the boxes.
4Third-party cookies inherited from our hosting provider
Our frontend is hosted at realtours.lovable.app and served through Cloudflare on www.realtoursai.com. The hosting provider's upstream content delivery network injects a small bot-management script (~flock.js) into every HTML response for fraud protection. Our site's Content Security Policy blocks this script from running in your browser, so it has no functional effect, but you may see a related cookie set by the upstream Cloudflare zone. We do not control this cookie and do not receive data from it.
5How to control cookies
You can refuse, restrict, or delete cookies in your browser's settings:
- Chrome: Settings → Privacy and security → Third-party cookies.
- Firefox: Settings → Privacy & Security → Cookies and Site Data.
- Safari: Settings → Privacy → Manage Website Data.
- Edge: Settings → Cookies and site permissions → Manage and delete cookies.
Disabling the essential cookies listed in section 2 will prevent you from signing in and will break core platform functionality. Disabling essential cookies is not something RealTours can avoid — it is a property of how authentication on the web works.
You can also use your browser's private browsing or incognito mode, which automatically clears cookies when the window is closed.
6Our commitment if cookies change
If, in future, RealTours adds any non-essential cookie (analytics, advertising, social, preference), we will:
- Update this Cookie Policy with the new cookie listed in section 2.
- Replace the current acknowledgement-only notice with an opt-in consent banner that defaults all non-essential categories to off and only sets them after you actively opt in.
- Provide a persistent way for you to withdraw consent at any time.
Until then, the lightweight notice on the bottom of every page is purely informational — there is nothing to opt out of beyond your browser's general cookie controls.
7Changes to this policy
If we make material changes to this Cookie Policy we will post a notice on the platform at least 14 days before the changes take effect. The effective date at the top of this page indicates the latest revision.
8Contact
Questions about cookies on RealTours? Email {{PLACEHOLDER_PRIVACY_EMAIL}}.
Last updated: {{PLACEHOLDER_EFFECTIVE_DATE}} · Questions? {{PLACEHOLDER_PRIVACY_EMAIL}}