Summary

QRA sets a small number of first-party cookies to keep you signed in, remember your language preference, and (when you opt in) measure anonymous product usage. We don't use cross-site tracking cookies and we don't sell what we collect.

Strictly-necessary cookies (always on)

sb-access-token, sb-refresh-token — Supabase Auth session cookies. Required to keep you signed in. Removed on sign-out.
qra_lang — your EN/AR preference. Lasts 1 year. No personal data.
qra_theme — dark / light theme preference. Lasts 1 year.

These cookies are essential for the site to function — disabling them in your browser will sign you out and reset your preferences on every page load. No consent banner is required by KSA PDPL or GDPR for strictly-necessary cookies.

Analytics cookies (consent required)

When we enable Google Analytics 4 on the marketing site (currently rolling out), it will set _ga and _ga_* cookies for ~13 months. These count anonymous page views + funnel events so we know which landing pages convert. IP addresses are anonymised before storage. Consent is collected via an in-page banner on first visit; you can change your mind anytime from the cookie preferences section below.

Until consent is granted, the GA4 script is not loaded — the cookies are never set in the first place.

Third-party cookies

Payment provider — the hosted checkout page may set its own session cookies while you complete payment. These live on the provider's own domain, not on qra.cc, and end when checkout finishes.
Google OAuth — only set when you click “Continue with Google.” Managed by Google; you can revoke access at myaccount.google.com/permissions.

How to opt out

Decline analytics cookies in the in-page banner (or click “Reject all” if you accepted earlier and changed your mind).
Use your browser's “Clear cookies for this site” setting — this signs you out and resets your preferences.
Browsers like Brave + Firefox + Safari block third-party tracking cookies by default. QRA doesn't rely on third-party tracking, so nothing breaks.

Cookie preferences

Changed your mind? Re-open the consent banner to accept or reject analytics cookies. Your choice is saved for a year and applies the next time analytics is available.

Contact

Questions about cookies, data retention, or your rights under KSA PDPL or GDPR: privacy@qra.cc.