Cookie notice

This site sets no advertising cookies, runs no third-party tracking pixels, and does not follow you across other websites. Nothing is stored on your device beyond what the site needs to work, which is why there is no cookie banner to click through.

What is stored on your device

Only these. Most are set only after you do something that needs them. They stay in your browser, they are never used for advertising, and none of them is sent anywhere for profiling.

• socotra-packing-v1: which items you have ticked off on the packing list, so the list survives a page reload. Set when you tick your first item. Cleared when you clear browser storage, or with the reset button on that page.
• sg_voter_key and sg_agency_upvotes: a random id for your browser and the tour operators you have upvoted, so one browser votes once. Set when you first upvote an operator. No account and no personal data are attached to that id.
• Supabase sign-in tokens: only if you sign in as an editor or a contributing photographer. Stored by the Supabase client with a one hour rolling refresh. Public readers never get these.
• A few cookies from the platform that hosts and delivers this site, currently named __cf_bm, __dpl and session-id. They route your request to the right version of the site, keep the connection secure, and tell real visitors apart from automated abuse. They are set on every visit because the site cannot be served without them, they hold no profile of you, and we do not read them.

How we measure visits

We count visits with Pulse, an analytics tool built by KICKFLIP, which is us, and running on our own infrastructure. It is not a third-party analytics product and no outside company receives what it records. Pulse stores nothing on your device: no cookies, no local storage, no persistent identifier. It does not follow you to other sites, and the data from this site is never combined with data from any other.

It records, at a level that describes visits rather than people:

• which pages were opened, in what order, and how long each was read
• where the visit came from: a search engine, an AI assistant, a link on another site, or typed directly
• roughly what is being used to read the site: device type, browser, language, window width, and the country the visit came from
• how far down a page people scroll, and clicks on certain links and buttons
• how quickly pages load, so we can find the slow ones

Your IP address is never stored. It is reduced to a coarse network before it is hashed together with a secret that changes every day, which means the same visitor cannot be recognised from one day to the next. Pulse also honours the Do Not Track and Global Privacy Control signals if your browser sends them. We keep these measurement records for up to 12 months. What remains after that is anonymous daily totals.

The legal basis for this measurement is our legitimate interest in understanding and improving the site, under Article 6(1)(f) GDPR. Because nothing is stored on or read from your device, no consent is required for it under the ePrivacy rules. You can object to it at any time by writing to us. The privacy policy sets out that right, and every other one you have, in full.

What your browser fetches from other companies

None of these sets a cookie here or stores anything on your device, but your browser has to ask them for a file, so each one sees your IP address and which page you are on. They are given nothing else: no name, no email, no inquiry.

• Google Fonts, for the typefaces, on every page
• OpenFreeMap, CARTO and Esri, for map tiles, only on pages that show a map
• Open-Meteo, for the forecast, only on pages that show weather

What we do not use

• No advertising or remarketing cookies (Google Ads, Meta Pixel, and the rest)
• No social media tracking pixels
• No Google Analytics. It ran on this site until August 2026 and has been removed, along with the consent banner it required.
• No fingerprinting, device graphs, or cross-site identity services

Browser-level controls

You can block or delete site storage entirely in your browser settings. Chrome, Firefox, Safari, Brave, and Arc all have a Privacy and Security panel where you can clear site data for socotra.guide and prevent future storage. This will not break the public site. You would lose your packing-list ticks, your upvotes, and your sign-in if you have an account.

Questions

Email office@socotra.guide. The privacy policy covers everything else we hold, why we are allowed to, how long we keep it and how to make us delete it.