/ cookies
Cookie Policy
Last updated: 16 July 2026
1. What are cookies?
Cookies (and similar technologies like localStorage and sessionStorage) are small pieces of data stored in your browser. They let a site remember things about you between page loads — for example, that you're signed in or what's in your cart.
2. Categories we use
- Strictly necessary — required to run the site: keeping you signed in, remembering your cart, protecting against abuse. These cannot be turned off.
- Preferences — remember choices you've made, such as theme.
- Analytics — help us understand aggregate, anonymised usage so we can improve the store.
3. Cookies and storage we set
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| sb-*-auth-token | sacreative.store (Supabase Auth) | Keeps you signed in after login (email or Google Sign-In). Required for the account, checkout and admin areas. | Strictly necessary | Session + refresh token (up to 1 year) |
| sa-cart | sacreative.store | Remembers items you've added to the cart between visits on the same device. | Strictly necessary | Local storage — until you clear it |
| sa-theme | sacreative.store | Stores your light/dark theme preference. | Preferences | Local storage — until you clear it |
| __cf_bm / cf_clearance | Cloudflare | Bot protection and security for our hosting and DNS layer. Set only when Cloudflare challenges a request. | Strictly necessary | 30 minutes – 30 days |
4. Analytics & trackers
We do not currently run third-party marketing trackers, advertising pixels, Google Analytics, Meta Pixel or similar profiling scripts on sacreative.store. If we add analytics in the future, we will update this page and, where required by law, ask for your consent first.
5. Third-party services
Some pages interact with services that may set their own cookies when you actively use them:
- Google — only when you click "Continue with Google" to sign in.
- Razorpay — only on the checkout / payment step, to process your payment securely.
- Supabase — our authentication and database provider, for session cookies.
- Cloudflare — our hosting/DNS layer, for security and bot mitigation.
6. Managing cookies
You can clear or block cookies in your browser settings. Blocking strictly-necessary cookies will break sign-in, cart and checkout. To disconnect Google Sign-In, remove SA Creative from your Google Account permissions page.
7. Contact
Questions about this policy? mdhasham2000@gmail.com.