Cookie Policy
Last updated: 26 August 2026
1. What this covers
This policy explains how Luma Digital Marketing uses cookies and similar technologies on lumadigital.co.za and in our client portal. It sits alongside our privacy policy, which explains what we do with personal information more broadly.
A cookie is a small text file a website asks your browser to store. It lets the site remember something between one page and the next — that you are signed in, or that you have already answered the cookie banner. Some of the same work is done by related technologies such as local storage and tracking pixels, and where we say “cookies” below we mean those too.
2. The three categories
- Strictly necessary. The site cannot work without them: remembering your cookie choice, and keeping you signed in to the client portal. These are not optional, and we do not need your consent for them.
- Analytics. Google Analytics 4, so we can see which pages people actually read and which ones are wasting everyone's time. Off until you accept.
- Marketing. Google Ads and the Meta Pixel, so we can tell whether an advert we paid for led to an enquiry. Off until you accept.
3. What runs before you answer the banner
We want to be precise about this, because it is the part most cookie policies gloss over.
- Google runs in what Google calls advanced consent mode. Its tag loads on every public page as soon as you arrive, but with all storage denied: it sets no cookies and cannot identify you. What it sends is an anonymous, cookieless signal that a visit happened. Accept analytics or marketing cookies and storage switches on; decline and it stays in that cookieless state.
- The Meta Pixel does not load at all until you accept marketing cookies. Nothing reaches Meta before that.
- Neither runs anywhere private. No analytics or advertising tag runs in the client portal, or on a quote, signing, form or review link we have sent you. Those pages are about your business, and we do not report them to anybody.
4. The cookies we use
Names ending in “…” vary — Google and Supabase append an identifier for the specific account or project.
luma_consent
Remembers which cookie categories you accepted, so you are not asked again on every page. Holds nothing that identifies you.
Set by Luma (this website) · Lasts 1 year
sb-…-auth-token
Keeps you signed in to the client portal. Only set once you log in, and never on the public website.
Set by Supabase (client portal) · Lasts Until you sign out
_ga, _ga_…
Tells us how many people visit and which pages they read. Only set if you accept analytics cookies.
Set by Google Analytics 4 · Lasts 2 years
_gcl_au
Measures whether an advert led to an enquiry. Only set if you accept marketing cookies.
Set by Google Ads · Lasts 90 days
_fbp
Measures whether a Meta advert led to an enquiry. Only set if you accept marketing cookies — the Meta Pixel does not load at all before that.
Set by Meta (Facebook, Instagram) · Lasts 90 days
We do not sell your data, and we do not use cookies to build a profile of you for anyone else.
5. Changing your mind
You can change or withdraw your choice at any time — it is exactly as easy as giving it was. Use in the footer of any page, or the link at the bottom of this one.
Withdrawing consent switches Google's storage back off and stops the Meta Pixel loading. Cookies already set are not deleted by that choice, so clear them in your browser if you want them gone: every major browser lets you delete cookies for a single site under its privacy or site settings. Blocking strictly necessary cookies will stop the client portal working.
6. Changes and contact
If we add or remove a tool, we update this page and the date at the top. Questions about anything here can go to info@lumadigital.co.za. Your rights under POPIA and the GDPR, and how to complain, are set out in our privacy policy.