Cookie Policy

Cookies are small text files a website stores in your browser. Some are needed for the site to work at all; others are optional and help us understand how the site is used. We group them into three kinds: Necessary, Analytics and Marketing.

Always on. The site needs these to work, or to do something you asked for, such as signing in. They are never used for analytics or advertising.

• wah_consent: remembers the choice you made in the cookie banner, so we do not ask on every page. Set on hoedspruit.co.za and its subdomains. Lasts 12 months.
• sb-<id>-auth-token (sometimes split into parts ending .0, .1): keeps you signed in to your traveller account or the business hub. Set by our login provider, Supabase, only when you sign in. Lasts up to 400 days, or until you sign out.
• sb-<id>-auth-token-code-verifier: a short-lived security code used while an email sign-in link is completed.
• __cf_bm and similar: may be set by Cloudflare, which protects the site, to tell people apart from automated traffic. Lasts up to 30 minutes.

We also keep a little information in your browser's own storage. It is not a cookie and is never sent to us on its own:

• shuri-currency and shuri-fx-rates: the currency you picked for prices, and the day's exchange rates.
• shuri.pending-save and shuri.safari-persona.pending: a place you saved or a Safari Persona result, held until you sign in so it is not lost.
• An offline copy of pages you have visited, when you add the site to your home screen, so they open without signal.

Off unless you choose Analytics or Allow all. These show us which pages and features people use and where things get confusing, so we know what to improve. We do not send your name, email address or phone number to these tools.

• _ga (Google Analytics 4): tells one browser's visits apart from another's. Lasts 2 years.
• _ga_<ID> (Google Analytics 4): keeps track of the current visit. Lasts 2 years.
• _clck (Microsoft Clarity): remembers Clarity's anonymous ID for this browser. Lasts 1 year.
• _clsk (Microsoft Clarity): joins the pages of one visit into a single session. Lasts 1 day.
• CLID, MUID, MR, SM and ANONCHK (Microsoft Clarity, on Microsoft's own domains such as clarity.ms): connect Clarity's measurement across visits. CLID and MUID last up to about a year, MR up to 7 days, ANONCHK 10 minutes and SM until you close your browser.

Microsoft Clarity records how pages are used, such as clicks, scrolling and where people stop, as session replays and heatmaps. By default it hides text that could be personal, including what you type into forms.

If you do not allow Analytics, these cookies are not set. Google Analytics and Clarity may still receive a basic signal that a page was viewed, without cookies and without an identifier that links one visit to the next.

If you allowed Analytics and later turn it off, we delete the Google Analytics and Clarity cookies on our own domain straight away and tell Clarity to stop using cookies.

Off unless you choose Marketing or Allow all. We do not use any advertising cookies today. If we start advertising with tools such as Google Ads or the Meta Pixel, their cookies will be listed here before they are switched on, and they will only be used if you have allowed Marketing.

Use Cookie settings at the foot of the site's pages, or the link at the top of this one. Your new choice applies straight away, without reloading the page.

You can also delete or block cookies in your browser's settings. If you delete wah_consent, we will ask you again on your next visit. Blocking necessary cookies may stop parts of the site, such as signing in, from working.

If you have questions about cookies or how your information is handled, contact us at info@shurimanagement.com. Our privacy policy explains your rights under POPIA.