Cookie Policy

1. What We Use

RihlaGate uses cookies and browser storage for the following purposes:

Service	Purpose	Consent Required
Cloudflare Turnstile	Bot protection on forms	No — essential
Supabase	Session management for signed-in traveller, coordinator, and partner accounts	No — essential
Paymob	Secure payment processing — session cookies set during checkout for fraud prevention; cleared after payment completes	No — essential
Cloudflare Analytics	Anonymized, aggregate site traffic insights (no individual tracking)	Yes
PostHog	Product analytics — page views, click events, and session data in pseudonymized form to improve the platform experience	Yes

Cloudflare Analytics does not track individuals or set cookies — it collects only anonymized aggregate data at the network level. PostHog data is pseudonymized and you can opt out at any time via the cookie banner.

LocalStorage

In addition to cookies, RihlaGate uses your browser's localStorage to store the following data locally on your device:

• Session token — keeps you signed in to your account across page loads (essential).
• Language preference — remembers your chosen display language (essential).
• Theme preference — remembers your chosen light or dark mode (essential).
• Content cache — stores a short-lived snapshot of public page content to reduce loading time (essential, no personal data).

This data is stored entirely on your device and is not transmitted to any third party. You can clear it at any time through your browser's site data settings.

2. Your Consent

When you first visit rihlagate.com, a banner will ask you to Accept or Reject non-essential cookies. Your choice is saved for 180 days. You can change it anytime via the cookie settings link in the footer.

Rejecting will disable Cloudflare Analytics and PostHog. Essential services (Turnstile, Supabase, Paymob) remain active regardless of your choice, as they are required for the platform to function.

Note: Essential cookies are necessary for the platform to function correctly. They cannot be disabled through the cookie banner.

3. Browser Controls

You can also manage or clear cookies directly through your browser settings at any time. Please be aware that disabling essential cookies may affect site functionality, including the ability to log in to the portal or use protected forms.

Most browsers allow you to:

• View all cookies stored by websites you have visited.
• Delete individual cookies or all cookies from a specific site.
• Block third-party cookies entirely.
• Set rules for accepting or rejecting cookies on a per-site basis.

4. Third Parties

RihlaGate integrates the following third-party services that may process limited technical data:

• Cloudflare — Powers our CDN, security layer, and analytics. See their privacy policy at cloudflare.com/privacypolicy.
• Supabase — Powers our authentication and database. See their privacy policy at supabase.com/privacy.
• Paymob — Processes card payments securely. Paymob may set short-lived session cookies during the checkout flow. See their policy at paymob.com/en/policy.
• PostHog — Product analytics. Pseudonymized usage events are sent to PostHog when analytics cookies are accepted. See their privacy policy at posthog.com/privacy.

We do not use any advertising networks, social media tracking pixels, or other third-party profiling cookies.

5. Contact

If you have any questions about our use of cookies or browser storage, please contact us:

Email: support@rihlagate.com

Website: rihlagate.com