[00]Cookies

Cookie and Storage Technologies Policy

What we store on your device and when. Everything optional is off until you say otherwise, and you can change your mind from any page.

Version PUBLIC_2026_08_v1 · Effective 20 August 2026

1. What this policy covers

This policy covers cookies, local storage, SDK/device identifiers, pixels and similar technologies that store information on, or access information from, a user's device.

2. Consent model

Nullshift's implementation is privacy-first:

  • strictly necessary technologies may operate without consent where legally permitted;
  • all other categories are disabled by default until valid consent, unless Nullshift has specifically documented that the technology satisfies a current statutory exception;
  • Reject All is as easy to access as Accept All at the first layer where consent is required;
  • optional categories are off by default;
  • withdrawal or change of preference is available from every page through “Cookie Settings”; and
  • consent records store the policy version, categories selected and timestamp, without storing unnecessary personal data.

3. Categories

Strictly necessary — needed for security, authentication, load balancing, fraud prevention, user-requested session functionality, consent memory or other functionality genuinely necessary to provide a requested service.

Functional — optional preferences or functionality not strictly necessary. Used without consent only where the implementation has been reviewed against a current legal exception; otherwise consent is required.

Analytics — measurement and service-improvement technologies. We do not assume a third-party analytics suite automatically qualifies for a consent exception; the actual configuration, purpose and data sharing are assessed, and we default to consent where uncertain.

Marketing — advertising, retargeting, cross-site tracking or marketing attribution technologies. These require consent before activation.

4. Live cookie inventory

The table on this page is generated from our maintained inventory, not written by hand.

5. Changes

Where a newly deployed tool adds a non-essential storage or access technology, our release checks fail until the cookie inventory and consent categorisation have been updated.

Nullshift Development Ltd, trading as Nullshift · company number 17284213 · registered office 66 Paul Street, London, England, United Kingdom, EC2A 4NA · not VAT registered · ICO ZC214743

What we currently store

Name / patternProviderPurposeCategoryPartyDuration
sb-*-auth-tokenSupabase (first-party cookie set by Nullshift)Keeps you signed in to the client portal and staff hub, and refreshes your session.necessaryFirstSession and refresh token lifetime
ns_consentNullshiftRemembers your cookie choices so we do not ask again and do not load anything you declined.necessaryFirst12 months
ns_client_previewNullshiftStaff only: marks a read-only 'view as client' portal preview session.necessaryFirst2 hours

We currently set no analytics, advertising or cross-site tracking technologies. Everything listed above is strictly necessary to run the site and the accounts on it — which is why there is nothing here to opt out of.

You can change or withdraw your choices at any time — you do not need an account, and withdrawing is as easy as consenting.

Cookie settings