Last updated: 23 May 2026
Cookies are small text files stored on your device by your web browser when you visit a website. They are widely used to make websites work efficiently and to provide information to website operators.
ChainShield uses essential cookies only. These are strictly necessary for the Platform to function and cannot be switched off. They are set in response to actions you take, such as logging in or setting your preferences.
| Cookie | Purpose | Duration | Security |
|---|---|---|---|
| sb-*-auth-token | Supabase authentication session — keeps you securely logged in | Session / refresh cycle | Secure, SameSite |
| sb-*-auth-token-code-verifier | PKCE verification — secures the login handshake | Authentication flow | Secure, SameSite |
| *-lang | Language preference for UI rendering (if multi-language support is enabled) | 1 year | Secure, SameSite |
| CSRF-token | Cross-Site Request Forgery protection for state-changing operations | Session | HttpOnly, Secure, SameSite |
Most cookies are set with Secure and SameSite attributes to prevent cross-site request forgery and ensure they are only transmitted over encrypted HTTPS connections. CSRF tokens are additionally set with HttpOnly to prevent access from JavaScript. Note: Supabase authentication tokens are intentionally set with httpOnly: falseto allow JavaScript middleware to validate session freshness during authentication flows.
ChainShield uses browser local storage and session storage for non-sensitive preferences. This data remains on your device and is never transmitted to our servers.
| Key | Purpose | Persistence |
|---|---|---|
| currentOrgId | Remembers your selected organisation context | Until cleared |
| currentMspId | Remembers your selected MSP context (MSP users) | Until cleared |
| sidebar-collapsed-* | Remembers your sidebar layout and section collapse state | Until cleared |
| chainshield_cookie_consent | Records your dismissal of the cookie notice banner | Until cleared |
| portal-vendor-* | Portal users: vendor context and submission progress | Until cleared |
Temporary data (form drafts, temporary context) is stored in session storage, which is cleared when your browser tab closes. No personal data is retained beyond your session.
Because we only use essential cookies required for the Platform to function, disabling them will prevent you from logging in or using the Platform. You can manage cookies through your browser settings:
Under the Privacy Act 1988 (Cth), explicit cookie consent is not required for essential cookies that are strictly necessary for the service you have requested. As ChainShield uses only essential authentication and CSRF-protection cookies, no consent banner is legally required. We provide this policy for transparency.
If we introduce optional cookies in the future (such as analytics), we will update this policy and implement a consent mechanism before setting those cookies.
If you have questions about our use of cookies, please contact us at privacy@chainshield.com.au.
See also: Privacy Policy | Terms of Service