Cookie notice

Development draft — this site is for synthetic testing and is not accepting live orders. These notices await publication approval before live collection.

Draft version 1 · 6 October 2026 · Not yet effective

This inventory covers the commerce portal. It uses first-party cookies for forms, sign-in, request protection, returning after sign-in and your chosen language. No optional analytics, advertising trackers or third-party embeds are included. The main Clickly and IAMSpock websites require their own inventories.

Clickly provides all cookies below. They apply only to this host, use the / path, are inaccessible to page scripts (HttpOnly) and use SameSite=Lax. HTTPS deployments also use the Secure flag.

Cookies and maximum browser durations

__Host-clickly_form

1 hour · Protects unauthenticated forms against forged requests. It can be set when you visit a public page, including this notice.

__Host-clickly_session

12 hours · Identifies the server-side session after password sign-in; it does not by itself bypass required MFA.

__Host-clickly_csrf

12 hours · Protects signed-in form submissions against forged requests.

__Host-clickly_next

10 minutes · Remembers the internal page to return to after sign-in or security checks; removed when consumed.

clickly_language

365 days · Remembers English or French when you explicitly choose a language. It is not used for profiling or advertising.

These are browser maximum ages when set, not a promise of access for that duration. Logout, expiry or revoked authority can end access earlier. Browser storage periods are separate from server-record retention.

On local HTTP development only, the four __Host- cookies use the corresponding clickly_ names without the prefix or Secure flag. clickly_language keeps the same name. Production requires HTTPS.

Your browser choices

You can view, block or delete cookies using your browser. Blocking session or protection cookies can prevent sign-in or form submission; deleting the language cookie removes that saved choice. You can also change language using EN or FR on each page.

Before adding optional technology, Clickly must assess it, update the notices and implement any required consent choice, including refusal and withdrawal. The inventory must be rechecked against the actual deployment before publication.

For cookie questions, use the subject COOKIE PRIVACY when contacting info@clickly.co.za.

Portal privacy notice