← Back to SHAKE
Legal

Cookie Policy

Last updated: 21 October 2026 · Version 1

Draft for lawyer review. The wording on this page is placeholder text and is not final legal wording. The tables below are generated from the code, so they show what SHAKE actually uses today.
1.

What This Page Covers

SHAKE International is operated by LEVIER (Pty) Ltd ("SHAKE", "we", "us"). This page explains the cookies and similar technologies (such as local storage and third-party requests) used on the SHAKE website, and how you control the optional ones. Personal information is handled as described in our Privacy Policy.

Nothing optional runs until you choose. Optional items stay off if you reject them, and your choice is stored on this device only, in a cookie that lasts 180 days.

2.

Your Choices

On your first visit a banner lets you Accept all, Reject non-essential, or Customise by category. You can change or withdraw your choice at any time:

If your browser sends a Global Privacy Control or Do Not Track signal, we treat it as a request to reject all optional categories and do not show the banner. You can still turn a category on yourself from the button above. Accepting a policy document when you sign up or sign in never switches optional cookies on.

3.

Necessary and User-Requested

These are needed to run SHAKE, or to provide a feature you asked for, so they do not need your consent. They are listed here for transparency.

NameProviderPurposeStorage
Sign-in sessionSHAKE / SupabaseKeeps you signed in and protects your account.Cookies named sb-<project>-auth-token, while you are signed in.
Cookie choice (shake_consent)SHAKERemembers the choices you make on the cookie banner.A cookie on this device for 180 days.
ThemeSHAKERemembers light or dark mode when you pick one.Local storage (shake-theme) until cleared.
Currency choice and exchange ratesSHAKERemembers your display currency and caches exchange rates fetched through SHAKE's own server.Local storage (shake-currency, shake-fx-rates, shake-fx-ts).
Saved listingsSHAKEKeeps the listings you choose to save.Local storage (shake_saved*) and your account.
Session stateSHAKERemembers filters, the country you pick and similar state while you browse.Session storage (for example shake_filter_state, shake_country_pref, and shake_invite, the invite code from a link you opened, kept only until the tab closes), cleared when the tab closes.
Reference data cachesSHAKESpeeds up pages by caching categories, locations and pricing. No personal data.Local storage (shake_ref_*).
Interface preferencesSHAKERemembers dismissed banners, unsent chat messages and similar interface state.Local storage.
MapsMapbox (USA)Shows maps only when you open one. Map tiles, styles and fonts come from Mapbox. Mapbox also receives map-load and session events for billing, and keeps an anonymous ID that rotates every 24 hours. Optional performance telemetry is turned off.Local storage (mapbox.eventData*). Hosts: api.mapbox.com, events.mapbox.com, *.tiles.mapbox.com.
Location search and map clicksOpenStreetMap Foundation, Nominatim (UK)When you search for a place or click the map, the text or coordinates and your IP address are sent to Nominatim to find an address.Nothing stored on this device. Host: nominatim.openstreetmap.org.
Password breach checkHave I Been Pwned / CloudflareWhen you set a password, the first 5 characters of its SHA-1 hash are sent to check it has not appeared in a breach. The password itself is never sent.Nothing stored. Host: api.pwnedpasswords.com.
PaymentsPaystackLoaded only when you pay for a plan. Paystack may set its own cookies inside its checkout.Set by Paystack. Host: js.paystack.co.
Sign in with Google or AppleGoogle, AppleA normal redirect to the provider when you choose that sign-in method. No script is loaded.Set by the provider on its own site.
Profile picture from GoogleGoogleIf you signed in with Google, your Google profile picture is requested from Google when it is shown.None on this device.
Push notificationsYour browser's push serviceOnly after you opt in. Notifications are delivered through your browser vendor's push service.A service worker and a push subscription on this device.
4.

Optional Categories

These load or store data only if you allow the category. This table is generated from the code.

Functional

Remember things on your device that make SHAKE easier to use, but are not needed for it to work.

NameProviderPurposeStorage
Recently viewed and recent searchesSHAKE (this device)Remembers the listings you viewed and the searches you made so they can be offered again, and the invite link or code you arrived with so it can be applied when you sign up.Browser local storage on this device, and a cookie named shake_ref for up to 30 days (invite code only), until you clear them or withdraw consent.
Analytics

Help us understand how SHAKE is used, for example how many people are online.

NameProviderPurposeStorage
Live visitor countSHAKE (first party)Counts how many people are on SHAKE right now, using a random anonymous ID.A random ID in local storage (sh_visitor_id) plus a heartbeat to our database every minute while a tab is open.
Listing and profile view countsSHAKE (first party)Counts views of listings and seller profiles so sellers can see how their listings perform.A per-session marker in session storage (cleared when the tab closes) and an anonymous count in our database.
Embedded media and marketing

Third-party content embedded in pages, which can set its own cookies.

NameProviderPurposeStorage
Embedded videos (YouTube, Vimeo)Google (YouTube), VimeoPlays videos embedded in articles. Without consent a video only loads after you press play.Set by the video provider once the video loads. We do not control these cookies. Hosts: www.youtube-nocookie.com, player.vimeo.com.

4 optional items in total. If we add one, we will ask you again.

5.

Third-Party Services Used Without Consent

The following hosts are contacted only when you use the feature that needs them (listed in section 3): *.supabase.co, api.mapbox.com, events.mapbox.com, *.tiles.mapbox.com, nominatim.openstreetmap.org, api.pwnedpasswords.com, paystack.com, *.paystack.com, paystack.co, *.paystack.co. We do not use advertising or marketing trackers, and the site loads no analytics or tracking scripts from third parties.

Third parties set and control their own cookies when their feature is used (for example Paystack at checkout, or a video provider once you load a video). Please see their own policies for details.

6.

Changes and Contact

If this page changes materially we will publish a new version and ask you to review it. Questions about cookies or your data: admin@levier.co.za.