Cookie & Tracking Policy

Last updated: 23 July 2026Version: 2.2 (Pilot Release)

1. What Are Cookies?

Cookies and local storage mechanisms are small data files placed on your browser or device when you interact with the Estavo Web Platform, Manager Portal, Trustee Portal, or Estavo Security App.

2. How Estavo Uses Cookies & Storage

Estavo uses strictly necessary functional cookies and local session storage. We do not use tracking cookies or sell user data to third-party ad networks.

2.1 Essential & Functional Cookies

Cookie / Key Name	Domain	Purpose	Type & Expiry
estavo_session	.estavo.co.za	Encrypted HTTP-Only session token for authenticated portal access	Essential (Session / 7 Days)
sb-auth-token	.supabase.co	Authenticated Supabase JWT session state	Essential (1 Hour, Auto-refreshed)
estavo_cookie_consent	app.estavo.co.za	Stores POPIA/GDPR user cookie consent choices	Functional (1 Year)

2.2 Local Storage & Session State

Form State Caching: Temporarily retains unsaved form state in local memory to prevent data loss if a modal is accidentally closed or revalidated.
Scanner Cache: Client-side PDF417 optical scanner configuration cache for Estavo Security App terminals.

3. Managing Cookies & Session Data

Users can customise or clear cookies and local storage at any time via the in-app Cookie & Privacy Preferences banner or browser settings. Please note that clearing essential session cookies (estavo_session / sb-auth-token) will immediately log you out of the Estavo Platform.

For questions regarding our Cookie Policy, contact privacy@estavo.co.za.