Legal
Cookie Policy
Last updated: September 20, 2026
NZCAM uses a small set of cookies, every one of them either strictly necessary or a simple setting. The one exception is advertising measurement, which loads only where you allow it, as explained below.
Cookies we use
| Cookie | Purpose | Duration |
|---|---|---|
sb-…-auth-token | Keeps you signed in. Set by Supabase Auth, our sign-in provider; the middle of the name is our project id, and a long session may be split across numbered parts. Strictly necessary. | Until sign-out, refreshed while you use the site |
sb-…-auth-token-code-verifier | Completes a sign-in that goes through another site (Google or GitHub, where offered) or a password-reset link: it holds a one-time secret that proves the sign-in that comes back is the one you started. Strictly necessary. | A few minutes, while that sign-in or reset is in progress |
nzcam-theme | Remembers your light/dark theme choice (preference, not tracking). | 1 year |
nzcam_geo | Records which consent rule applies where you are (opt-in in the EEA/UK/Switzerland, opt-out elsewhere), so the right control is shown. Holds only that word, never your location. | 1 day |
nzcam_bank | Whether bank transfer can be offered where you are, so the buy buttons show the right payment options. Presentation only. | 1 day |
Your marketing-cookie choice itself is not a cookie: it is stored in your browser's local storage (under nzcam.consent.marketing) and is never sent to us.
Marketing cookies — only if you say yes
We advertise NZCAM on TikTok, and we use the TikTok Pixel to see whether an ad actually led to a visit, a signup or a purchase. It sets _ttp and _tt_enable_cookiecookies, reads TikTok's ttclid click identifier from the link you arrived on, and reports your IP address and browser user-agent to TikTok. That is advertising measurement, and TikTok may combine it with what it already knows about you. (Separately from any cookie, our server reports completed purchases to TikTok as described in section 6 of our Privacy Policy; that involves no cookies and is not controlled by the switch below.)
How you control it depends on where you are, because the law does. In the EEA, the UK and Switzerland nothing loads until you accept: a banner appears on your first visit, and until you choose — or if you decline, or simply ignore it — no request is made to TikTok and no marketing cookie is set. Everywhere else the pixel loads by default and you can turn it off whenever you like, which is the standard the applicable laws set, including California's.
Either way, this switch is the control, and it takes effect immediately:
It applies to this browser. Clearing this site's data resets it, which in the EEA/UK/Switzerland brings the banner back.
What we don't use
We don't use any other advertising or cross-site tracking cookies, and we don't sell your personal data. Our website analytics (a self-hosted Plausible instance) is cookieless by design: it doesn't identify individual visitors, so it runs for everyone and needs no consent. The cookies in the table above also run without consent: the two sign-in cookies because the site cannot work without them, and the other three because they hold a setting of yours and nothing else.
Managing cookies
You can clear or block cookies in your browser settings at any time. Blocking the sign-in cookies will sign you out; blocking the theme cookie just means the site follows your OS light/dark setting instead; blocking the two one-day settings cookies means the site assumes the stricter consent rule and US dollars, both of which you can change by hand.