Privacy
Cookie and local-storage policy
Version 2.0 · Effective August 3, 2026
What this site uses
A cookie is a small value a site stores and sends with later requests. Local storage keeps a preference in the browser but is not automatically sent with every request. We use necessary cookies for portal authentication, local storage to remember your cookie choice, and — only if you accept — Google Ads advertising cookies. Since August 3, 2026 the cookie notice is a real choice: until you accept, no advertising cookie is set. You can change your mind by clearing site data, which brings the notice back.
Current technologies
| Name | Type | Purpose | Category | Duration |
|---|---|---|---|---|
| sb-<project-ref>-auth-token and .0, .1, … chunks | Browser cookies (Secure in production; SameSite=Lax) | Keep you signed in, refresh tokens, and protect portal access. | Necessary | Maximum 400 days under the current configuration; replaced as the session refreshes and cleared when you sign out. |
| storage_notice_acknowledged | Browser local storage | Legacy key from the earlier informational notice (before August 3, 2026). No longer written or read. | Preference | Until you clear site data. |
| consent_v1 | Browser local storage | Remember whether you accepted or rejected advertising cookies, with the date and notice version. | Preference | Until you clear site data. |
| _gcl_aw, _gcl_dc | Browser cookies (Google Ads) | Attribute an application or a booked call back to the ad you clicked. Set ONLY if you accept. | Advertising (optional) | Up to 90 days. |
Analytics and marketing
Public marketing pages use Vercel Web Analytics for aggregate cookieless page-view and call-to-action conversion metrics. Conversion events include the action, page position, site locale, and page variant; they do not include form contents. Portal, admin, authentication, and guardian-consent routes are excluded. We do not currently install optional marketing cookies or behavioral advertising. The notice is informational and only remembers that you dismissed it. If we add an optional technology that requires consent, we will update this policy and connect a control before enabling it.
Third-party sites
Hosted Google Calendar, Stripe, Donorbox, QuickBooks, or other service links open an external provider. That provider may use its own cookies under its notice; those controls are not managed by this banner.
Your controls
- You can clear cookies and local storage in browser settings; the banner will appear again.
- Blocking necessary cookies may prevent sign-in or a secure session.
- We do not show non-functional consent controls when no optional technology is active.
For provider, transfer, and rights information, read the privacy notice.