Cookie Policy

1. The short version

We set three cookies, all of them strictly necessary: one that remembers your session, one that protects forms from being submitted by another site on your behalf, and one that only exists if you asked us to keep you signed in.

We do not run Google Analytics or any other analytics tool. We do not run advertising, retargeting or social-media pixels. Nothing on this site follows you to another site. That is also why you are not being shown a cookie consent banner: consent is not required for cookies that are strictly necessary to provide a service you asked for, and we have nothing else to ask you about.

2. The cookies we set

All three are first-party cookies, set by this site for this site:

Blocking these cookies is your choice, but the site will not work properly without them: you will not be able to sign in, submit the waitlist form or complete a checkout.

• Session cookie — holds a random identifier for your visit. It is what lets the site know that the page you are reading now and the form you submit next belong to the same person. It is how you stay signed in, and it carries your language choice and your progress through checkout. It expires after two hours of inactivity, or when you close your browser.
• CSRF token cookie (XSRF-TOKEN) — a security token proving that a form was submitted from our page and not from another site pretending to be you. Same lifetime as the session.
• Remember-me cookie — set only if you tick “remember me” when you sign in, so you do not have to sign in again on your next visit. It lasts until you sign out or it expires. If you never tick the box, it is never set.

3. Your language is not a separate cookie

Whether you are reading in Arabic or English is decided by the address you are on — the plain address is Arabic and the “/en” version is English — and your last choice is remembered inside the session cookie above, so that the checkout and your account come up in the same language. There is no separate language cookie to accept or refuse.

4. What we do not set

For the avoidance of doubt, and as of the date at the top of this page, this site sets none of the following:

• analytics or measurement cookies of any kind;
• advertising, retargeting or conversion-tracking pixels;
• social-media sharing or “like” trackers;
• third-party profiling or data-broker tags;
• any cookie that follows you across other websites.

5. Requests the pages make to other companies

Cookies are not the only way a page can reveal something about you. For completeness, these are the requests our pages make outside our own servers:

• Google Fonts — the two typefaces the site is set in are downloaded from fonts.googleapis.com and fonts.gstatic.com. No cookies are set, but the request itself tells Google your IP address and which browser you are using.
• Our video — served from our own server on our own domain, not from a third-party video platform. No third party learns what you watch.
• PayPal — reached only when you go to pay, at which point you are on PayPal’s own pages under PayPal’s cookie and privacy policies. PayPal sets nothing on our pages.

6. If we ever add analytics

This section is deliberately here and deliberately empty. We are not using analytics today, and this policy will not pretend otherwise in advance.

If we add a measurement or advertising tool later, three things happen before it is switched on: this page is updated to name the tool, list every cookie it sets and say how long each one lasts; a consent mechanism is added so that you can accept or refuse it; and nothing non-essential is set unless and until you have agreed to it. Until you see this section filled in, nothing of the sort is running.

7. Managing cookies in your browser

Every major browser lets you see, block and delete cookies from its settings, usually under “Privacy”. Blocking cookies from this site will stop you signing in and stop checkout from completing, because there would be nothing to carry your session from one page to the next.

8. Contact us

Questions about this policy: [PRIVACY CONTACT EMAIL].

How we handle personal data generally is set out in our Privacy Policy.