inyourroots® Cookie Policy
What this policy covers: What cookies and similar browser storage inyourroots® uses, why, which are essential versus non-essential, and how to control your choices.
Last updated: 10 September 2026
Version: 2
Next review: 10 September 2027
Quick summary
- We use storage that is necessary to provide and secure inyourroots®; non-essential analytics is not activated until you have been given a choice and agreed where consent is required.
- Google Analytics (_ga, _ga_*) is the confirmed non-essential analytics provider, and does not load before the required consent signal.
- Supabase authentication and consent-preference storage are strictly necessary; some of it uses browser local storage rather than a traditional cookie.
- You can accept or reject non-essential cookies, reopen your choice later, and manage or delete cookies in your browser.
- We do not use advertising or cross-site marketing cookies; if that changes we will update this policy and get consent first.
1) What cookies are
Cookies are small files a website stores on your device so it can remember information such as whether you are signed in, the choices you made or how the service is used. Websites can also use similar browser storage technologies.
2) The short version
We use storage that is necessary to provide and secure inyourroots®. Non-essential analytics must not be activated until you have been given a choice and have agreed where consent is required. You can change your mind.
3) What we currently know is used
The exact production inventory must be checked whenever the website or Budi application changes. We do not invent cookie names that have not been observed in the live service.
| Cookie or storage family | Provider | Purpose | Typical duration | Consent position |
|---|---|---|---|---|
_ga | Google Analytics | Distinguishes browsers for analytics measurement | Up to 2 years, subject to the configured retention and consent settings | Consent required |
_ga_* | Google Analytics | Maintains session and campaign state for a specific Google Analytics property | Up to 2 years, subject to configuration | Consent required |
| Authentication session storage | Supabase | Keeps a signed-in user authenticated and protects account access | Session-based or until sign-out/token expiry, depending on the product surface | Strictly necessary where used |
| Consent-preference storage | The inyourroots® consent interface | Remembers the user’s cookie choice | Until the preference expires or is cleared | Strictly necessary |
Supabase authentication may use browser storage rather than a traditional cookie on some product surfaces. The purpose and user choice matter even where the technology is called local storage rather than a cookie.
At the date of this policy, Google Analytics is the confirmed non-essential analytics provider. We do not authorise analytics to load before the required consent signal.
We do not currently describe advertising or cross-site behavioural marketing cookies as part of the service. If we introduce them, we will update this policy and obtain consent before activating them.
4) Essential and analytics storage
Essential storage keeps accounts signed in, protects sessions, remembers privacy choices and supports core security. It does not require consent where it is genuinely necessary for a service the user requested.
Analytics storage helps us understand which parts of the website or Budi people use and where they encounter problems. It is non-essential and is used only with the required consent.
5) Third parties
Some third-party or embedded content may use its own cookies or storage. Where that happens, we will identify the provider and provide an appropriate choice before non-essential storage is used.
Our current service providers and the wider use of personal information are explained in the inyourroots® Privacy Policy.
6) Your choices
When non-essential cookies are offered, the consent interface must allow you to accept or reject them without making rejection unnecessarily difficult.
A persistent method for reopening cookie choices must be provided before non-essential analytics is enabled. If the settings control is not visible, contact support@inyourroots.com and use your browser settings to block or delete non-essential cookies.
Blocking essential storage may prevent sign-in or other requested features from working.
Independent guidance is available at allaboutcookies.org.
7) Keeping the inventory accurate
Because cookie names and durations can change through provider configuration, we review the live inventory when analytics, authentication, hosting, consent or embedded-content features change.
A full production browser scan was not available during this policy update. The next technical review must verify the exact Google Analytics property cookie, Supabase storage keys, consent-preference name, domains, durations and whether any additional cookies are present. Until then, this policy states confirmed providers and standard cookie families without pretending an unverified identifier is exact.
8) Contact
Inyourroots Ltd is the controller.
Company number 17285309
Suite A82, James Carter Road, Mildenhall, United Kingdom, IP28 7DE
Email support@inyourroots.com. You may complain about the handling of personal information to the Information Commissioner’s Office at ico.org.uk.
Questions or concerns?
If anything here feels unclear, tell us. We'll help.
Contact us about this policy →