Cookie Policy

This policy explains what this membership portal (membership.iiazambia.com), operated by the Institute of Internal Auditors — Zambia ("IIA Zambia", "we", "us"), stores in your browser, and why. We use cookies and similar browser storage only to make the site work — never for advertising, tracking across other websites, or building a profile of you for marketing.

The one cookie we set

When you sign in with Google — whether as a member claiming your profile or as an admin — we set a single, essential session cookie (named something like sb-*-auth-token) that keeps you signed in as you move between pages. It:

• Is set by Supabase, our authentication provider, and read by this site's own server to confirm who you are on each request — never sent to or readable by any other website.
• Is strictly necessary for the portal to function — without it, you'd be signed out on every page load. There's no way to use the parts of this site that require signing in (claiming your profile, the member dashboard, the admin area) without it.
• Contains no advertising or cross-site tracking identifiers, and is never sold or shared with third parties.
• Expires automatically, and clearing your browser's cookies (or signing out) removes it immediately.

We don't use any other first-party cookies — no analytics cookies, no advertising cookies, no preference cookies.

Browser storage that isn't a cookie

A few small settings live in your browser's local/session storage rather than a cookie — mentioned here for completeness, since the distinction matters less to you than knowing it's there. Unlike a cookie, none of this is ever sent to our server; it only ever stays on your own device.

• Theme preference — whether you've chosen light or dark mode, remembered indefinitely until you change it or clear your browser data.
• Sidebar state — whether you last left the admin or member dashboard sidebar collapsed or expanded.
• Claim-flow details, briefly — if you're claiming your membership profile, the phone number, organization, and job title you enter carry from one step to the next this way. This clears itself the moment you close the browser tab.
• "Already seen this" flags — e.g. that you've already seen the welcome splash screen this session, or dismissed a notice about your account being signed in elsewhere. These also clear when you close the tab.

Sign-in and analytics

• Google — when you click "Continue with Google," Google sets its own cookies on google.com as part of that sign-in flow. Those are governed by Google's own cookie policy, not this one — we never see or control them.
• Vercel Analytics — we use this to see aggregate traffic to the site (e.g. how many people visited a page), which Vercel provides without setting a cookie or otherwise identifying you individually.

Why there's no cookie-consent banner

This site doesn't show a cookie-consent pop-up because it doesn't use any cookies beyond the one strictly necessary to keep you signed in — the kind that most privacy regulations (including Zambia's Data Protection Act) don't require consent for, since the site simply can't work without it. If that ever changes — for example, if we add analytics or marketing cookies in the future — we'll update this page and add a consent mechanism before doing so.

Managing or blocking cookies

You can block or delete cookies at any time through your browser's settings. Since the one cookie this site sets is what keeps you signed in, blocking it means you won't be able to stay signed in — public pages like membership verification, the FAQ, and the job board don't require signing in and will still work normally.

Changes to this policy

We may update this policy if what this site stores in your browser changes. The "Last updated" date at the top of this page reflects the most recent revision.

Contact us

For questions about this policy, contact IIA Zambia at membership@iiazambia.com.