Cookie Information

This page explains how DelegateNow uses cookies, local storage, session storage and similar storage or access technologies on delegatenow.co.uk. These technologies may store information on, or access information from, a user’s device.

DelegateNow may use technologies that are strictly necessary to provide security, authentication, saved preferences, consent controls and user-requested features without asking for consent. Non-essential analytics, tracking and external embedded content are blocked unless the user gives the required consent or affirmatively chooses to load the content after receiving clear information.

Strictly necessary

These support core functions such as security, account authentication, session continuity, load balancing, remembering privacy choices and saving assessment progress requested by the user. Anonymous assessment progress may be stored locally on the device. Authenticated assessment progress may be stored securely in Supabase. These technologies cannot be switched off through the consent control where they are genuinely necessary, although users can clear browser storage; doing so may sign them out or remove saved progress on that device.

Analytics

Analytics helps us understand service performance and usage. At launch, any analytics technology that has not been documented and confirmed to satisfy a lawful consent exception must be treated as non-essential and blocked until Analytics consent is given. Analytics consent may be withdrawn at any time.

External media and resources

Pages may include YouTube or other external resources. Until External media consent is given, or the user clicks a clearly labelled load button after receiving the notice, the site must show a privacy-preserving placeholder and must not contact the external provider, set its technologies or transmit the visitor’s IP address or device information to it. After loading, the external provider may use cookies or similar technologies under its own terms.

• Anonymous assessment device storage — provider: DelegateNow; purpose: retain in-progress answers on the device; category: strictly necessary when requested by the user; duration: until completion, restart, manual browser clearing or the configured expiry.
• Authentication/session storage — provider: DelegateNow/Supabase; purpose: sign-in, session security and account continuity; category: strictly necessary; duration: session or configured authentication lifetime.
• Consent preference storage — provider: DelegateNow or its consent tool; purpose: remember accept/reject choices; category: strictly necessary; duration: up to six months, then consent is refreshed, or earlier if purposes change.
• Lovable analytics or /~flock.js — provider: Lovable and relevant infrastructure; purpose: analytics/diagnostics; category: non-essential unless a documented statutory exception applies; launch rule: blocked before consent; exact identifiers and duration must be confirmed in the production technology scan.
• YouTube embedded content — provider: Google/YouTube; purpose: display user-selected videos; category: external media; launch rule: blocked before consent or affirmative click; provider technologies and duration are controlled by Google once loaded.

The production Cookie settings interface must display the actual technology name, provider, purpose and duration discovered in the final scan. No undocumented non-essential technology may be enabled merely because it is absent from this page.

On the first visit, the consent control must offer “Reject non-essential” and “Accept all” with equal prominence, plus “Manage choices”. Users must be able to select Analytics and External media separately. No box may be pre-selected. Closing or ignoring the control does not constitute consent. The core service must remain available after rejection.

Users can change or withdraw choices at any time through the persistent “Cookie settings” footer link. Withdrawal must be as easy as giving consent. Previously permitted non-essential technologies must stop loading after withdrawal; existing third-party cookies may also need to be removed through browser settings.

Cookie settings

YouTube/Google privacy information: https://policies.google.com/privacy. Supabase privacy information: https://supabase.com/privacy. Lovable privacy information: https://lovable.dev/privacy. External providers may update their technologies independently, so DelegateNow periodically rechecks the production site.

Questions about storage technologies should be sent to privacy@delegatenow.co.uk. Last updated: 22 August 2026.