This Cookie Policy explains the cookies, browser storage, and similar technologies that Folktale uses on this website, what they do, how long they last, and how you can manage your choices. We keep this page in sync with what the site actually sets.
1. What we mean by "cookies"
For clarity, "cookies" in this policy covers small files stored by your browser (HTTP cookies), as well as similar client-side storage we rely on for the same purposes, such as localStorage and sessionStorage. Where a row in the table below uses browser storage rather than an HTTP cookie, we say so.
2. Categories we use
- Strictly necessary: required for the site to work, including remembering your cookie choice, keeping you signed in to admin areas, and preserving small UI preferences. These cannot be switched off.
- Analytics: help us understand how the site is used in aggregate so we can improve it. Set only after you accept in the consent banner.
We do not currently set advertising or cross-site marketing cookies. If that changes, we will update this page and re-prompt you for consent.
3. Cookies and storage we set
| Name | Type | Category | Purpose | Duration |
|---|---|---|---|---|
| folktale.cookie-consent | localStorage | Strictly necessary | Remembers whether you accepted or declined non-essential cookies, so the banner does not reappear on every visit. | Until cleared |
| folktale.cookie-session-id | localStorage | Strictly necessary | A random identifier attached to your consent record so we can evidence your choice (and any change to it) for audit purposes. Not used to track you across the site. | Until cleared |
| sidebar:state | HTTP cookie | Strictly necessary | Remembers whether the navigation sidebar is open or collapsed between visits. | 7 days |
| sb-<project>-auth-token | localStorage | Strictly necessary | Set by our backend (Supabase) when you sign in to an authenticated area such as admin pages, to keep you signed in. Only present if you have signed in. | Until sign-out or expiry |
| folktale.admin.password | sessionStorage | Strictly necessary | Used only on admin pages, to keep the admin signed in for the current tab. Not set for ordinary visitors. | Until tab is closed |
| folktale.analytics.session | sessionStorage | Analytics | A short-lived identifier used to group page views in the same browsing session for analytics. Only created if you accept analytics cookies. | Until tab is closed |
| _ga, _ga_<ID> | HTTP cookie (Google) | Analytics | Set by Google Analytics 4 (loaded via Google Tag Manager) to distinguish users and sessions and to measure aggregate site usage. Only set after you accept analytics cookies. | Up to 2 years |
| _gid, _gat, _gcl_* | HTTP cookie (Google) | Analytics | Additional Google Analytics / Tag Manager cookies that may be set for rate-limiting and conversion measurement. Only set after you accept analytics cookies. | Up to 24 hours / 90 days |
4. Third parties
Analytics cookies in the table above are set by Google Analytics 4, loaded through Google Tag Manager. They are only loaded after you accept analytics cookies in the banner. Google may process the resulting data as an independent controller under its own terms.
The site is hosted and served via our cloud provider, and forms (for example, "Speak to sales") are submitted to our backend and CRM (Pipedrive). These transfers do not set cookies in your browser, but they are described in our Privacy Policy.
5. Managing your choices
- Use the cookie banner shown on your first visit to accept all cookies or keep only essential ones.
- To change your choice later, clear the
folktale.cookie-consententry from your browser storage (or clear site data for folktale.ai) and reload the page - the banner will appear again. - You can also block or delete cookies entirely through your browser settings. Some parts of the site (for example, signing in to admin areas) may not work correctly without strictly necessary cookies.
6. Recording your consent
When you make a choice in the banner, we keep a record so we can demonstrate consent if asked. The record contains the choice (accepted / essential only), the policy version, a timestamp, the anonymous session identifier above, a one-way hash of your IP address, and your browser user-agent string. We do not store your raw IP address.
7. Changes
We may update this policy from time to time to reflect changes in the technologies we use or in applicable regulation. The "last updated" date at the top of this page indicates when changes were last made; material changes will trigger the banner to ask for your consent again.