What cookies are
Cookies are small text files stored by your browser. Similar technologies include local storage and session storage on your device. Some cookies are first-party (set by nbukhari.dev). Others are third-party (set by a provider such as PayPal when you complete a payment).
Cookies we set
These cookies are required for the site to function. They authenticate a session, protect forms against cross-site request forgery, and remember the language you selected. Without them, sign-in, the contact form, and locale switching cannot work reliably.
The session cookie name follows the Laravel default derived from the application name, unless SESSION_COOKIE is set. The CSRF cookie is XSRF-TOKEN. Session lifetime defaults to 120 minutes of inactivity.
| Name | Purpose | Duration | Type |
|---|---|---|---|
| nawras-al-bukhari-session | Keeps you signed in and stores the selected locale and other session state. | 120 minutes of inactivity by default | Strictly necessary |
| XSRF-TOKEN | Protects forms and authenticated requests against cross-site request forgery. | Session | Strictly necessary |
| _ga | Distinguishes public-site visitors for Google Analytics measurement. | Up to 2 years | Analytics |
| _ga_2Q0VJXFNGT | Maintains the Google Analytics session for this site. | Up to 2 years | Analytics |
Browser storage that is not a cookie
Some preferences are stored in local storage or session storage on your device. They are not sent with every HTTP request the way cookies are.
- nb-public-theme and nb-app-theme: colour theme for the public site and the application.
- app.sidebar.collapsed: whether the application sidebar is collapsed.
- Command palette recents and invoice line presets: convenience data in the staff application.
- nb-mark-drawn: a session flag so the identity mark is not redrawn on every page in the same visit.
Third-party cookies
The public marketing pages do not load advertising networks or social tracking tags. They load Google Analytics for aggregate traffic and page-view measurement.
Google Analytics may set cookies or similar identifiers while you browse public pages. Google processes that data under its own terms and privacy documentation.
- PayPal or Payoneer: if you open a payment checkout from an invoice, that provider may set cookies needed to complete the payment.
- Google Analytics: the `_ga` and `_ga_2Q0VJXFNGT` cookies measure public-site visits and page views.
- Google: if a workspace user connects Google Calendar, Google may set cookies on Google’s domains as part of OAuth and Calendar.
- Pusher: if realtime notifications are enabled in the authenticated application, Pusher may set cookies or similar identifiers for the websocket connection.
How you can control cookies
You can delete or block cookies in your browser settings. Blocking strictly necessary cookies will break sign-in, language selection, and form submission; blocking analytics cookies will not break the site.
Google Analytics is loaded immediately on public pages. You can prevent its cookies through browser controls or an extension that blocks Google Analytics.
To change the stored theme, use the theme control on the site. Clearing site data in the browser removes local storage preferences.
Changes
If we add advertising or other tracking beyond Google Analytics, this policy will be updated first and, where required, we will ask for consent before setting it. The date at the top is the effective date of the current version.
Questions about this page: [email protected]