Draft for review · Version 2026-09-22.1. Service ordering is not yet open. Final service terms and contact arrangements are being confirmed.
Company information
SHANALINK LTD, company number 17433946. Registered office: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.
Account cookies
The current account system uses Supabase authentication cookies (sb-…-auth-token, sometimes split into numbered parts) to maintain sign-in and refresh sessions. These are needed for requested account functionality. Their exact lifetime and any hosting security cookies must be checked in the deployed cookie inventory before launch.
Optional storage
With your permission, we count views of public service and contact pages to understand which content is useful. Our analytics database stores only a UTC date, a permitted page path and a total count. It does not store IP addresses, visitor identifiers, query strings, referrers or account details. Daily aggregate totals are retained for year-on-year comparisons in our existing Supabase database; Vercel hosts the collection endpoint. Ordinary hosting security logs are separate. With the same analytics permission, Google Analytics (G-QNPVCBEHN0) also measures visits using cookies, browser and device information. Google receives measurement data and processes it under its privacy policy at policies.google.com/privacy; processing may take place outside the UK. We do not send enquiry form fields or account details to Google. Advertising storage and advertising measurement data are denied unless you separately allow ad measurement. With that permission, Google Ads (AW-18338274048) uses ad-click identifiers, cookies such as _gcl_aw (normally up to 90 days), device information and a random quote identifier to attribute successful quote requests to adverts. Enhanced conversions and advertising personalisation remain disabled. The _ga and _ga_QNPVCBEHN0 cookies distinguish browsers and sessions and are configured to expire after 180 days, refreshed on use.
Your controls
Choose Allow analytics & marketing, Analytics only, or Reject optional cookies. Tracking stays off until you allow it. We remember your choice in local storage (shanalink-analytics-choice-v2) for 180 days. Separate shanalink-ads-measurement-choice and shanalink-meta-marketing-choice-v1 preferences remember Google advertising and Meta marketing choices for 180 days. Earlier Google-only consent does not enable Meta. Use Privacy settings on public pages or this page to change your choice at any time. Rejecting analytics does not affect enquiries or ordering. Rejecting stops future optional measurement and removes first-party analytics and advertising measurement cookies. It does not erase events already received by providers. Existing aggregate totals cannot be linked back to you. You can also clear your browser storage; blocking account cookies may prevent sign-in.
Meta marketing cookies
With marketing permission, Meta Pixel (1589077622868494) records public-page visits and successful enquiries for Facebook and Instagram advertising measurement. Meta may set _fbp and, where a Facebook ad-click identifier is present, _fbc cookies, generally lasting up to 90 days and potentially refreshed on use. Events include browser/device and network information, page/referrer URLs, cookie/ad-click identifiers and a random enquiry event identifier. No enquiry form fields are included in our event payloads. Meta may associate these events with its users and personalise advertising under facebook.com/privacy/policy and facebook.com/privacy/policies/cookies; processing may occur outside the UK. Automatic event configuration is disabled in our integration, and no advanced-matching form data is supplied. The pixel does not load on account or admin pages.