Jols Cookie Notice
Effective date: 24 September 2026
This Cookie Notice explains the cookies and similar technologies used on the Jols website at jols.co.za, including the ticket checkout pages and the venue portal (together, the "Website"). It is published by JOLS (PTY) LTD ("Jols", "we", "us", or "our") and forms part of our Privacy Policy at https://jols.co.za/privacy.
The Jols mobile app does not use cookies. How the app handles your information is explained in the Privacy Policy.
1. The short version
- We only use strictly necessary cookies. They keep you signed in to the venue portal and remember which venue you are managing. They are only set once you sign in.
- If you just browse the Website, we set no cookies at all.
- We do not use advertising cookies, cross-site tracking cookies, or social-media tracking pixels, and we do not sell or share information for advertising.
- We count page views with a cookieless analytics tool (Section 4).
Because every cookie we set is strictly necessary to provide a service you asked for, we do not show a cookie banner or ask for cookie consent.
2. What cookies are
A cookie is a small text file that a website stores in your browser so it can recognise your browser on later requests. A cookie set by the site you are visiting is a first-party cookie. A cookie set by a different company's site is a third-party cookie.
3. Cookies we set
All of these are first-party cookies set by jols.co.za. None of them is used for advertising or to track you on other websites.
| Cookie | What it does | When it is set | How long it lasts | Type |
|---|---|---|---|---|
| sb-[project]-auth-token (the name ends in a code for our database project; a large session may be split across cookies ending in .0, .1 and so on) | Keeps you signed in to the venue portal (and, for Jols staff, the admin area). It holds your sign-in session from our authentication provider, Supabase. | When you sign in | Until you sign out, or at most 400 days (the default lifetime set by our sign-in library). Your session itself is renewed while you use the portal and ends when you sign out. | Strictly necessary |
| sb-[project]-auth-token-code-verifier | A one-time security code used while you sign in with Google or Apple, so the sign-in cannot be intercepted. | When you tap "Continue with Google" or "Continue with Apple" | Removed when your sign-in completes | Strictly necessary |
| portal_venue | Remembers which venue you last chose, if you manage more than one. It is only sent to venue-portal pages. | When you switch venue in the portal | 90 days | Strictly necessary |
4. Analytics without cookies
We use Vercel Web Analytics, provided by our website host Vercel, to count page views in aggregate, so we can see which pages are used. It:
- does not set cookies and does not store anything in your browser;
- does not build a profile of you or follow you to other websites;
- may also count when a sign-up form on the Website is started or submitted (not what you type in it).
5. Other technologies that do not use cookies
- Error reports (Sentry): if a page on the Website breaks, a technical error report is sent to Sentry. We set Sentry not to collect personal information by default. It does not set cookies.
- Abuse protection (Upstash): to stop abuse of sign-in, sign-up forms and checkout, our servers briefly count requests from each IP address. This counter is kept on our servers (with Upstash), not in your browser, and no cookie is set.
- No browser storage for tracking: the Website does not use your browser's local storage or session storage to track you.
The Privacy Policy (Sections 2.4, 5.2 and 8) explains what these providers process and for how long.
6. Third-party sites you are sent to
Some steps take you to another company's website, which uses its own cookies under its own notice:
- Paystack: when you pay for a ticket or a venue plan, you are sent to Paystack's secure checkout page (checkout.paystack.com). Cookies on that page are set by Paystack, not by Jols.
- Google and Apple: if you sign in with Google or Apple, their sign-in pages set their own cookies.
We do not control those cookies. Please read Paystack's, Google's and Apple's own privacy and cookie notices.
7. Managing cookies
You can block or delete cookies in your browser settings. If you block the cookies in Section 3, you will not be able to sign in to the venue portal, because they are needed for it to work. Browsing the rest of the Website and buying tickets through the Jols app are not affected.
Signing out of the venue portal removes the sign-in cookie.
8. Changes to this notice
If we add a cookie or change how one is used, we will update this notice and its effective date. If we ever want to use a cookie that is not strictly necessary (for example, for analytics that use cookies, or for advertising), we will ask for your consent first and give you a way to say no.
9. Contact us
- Questions about this notice or your personal information: admin@jols.co.za
- Information Officer: Luca McKay
- Responsible Party: JOLS (PTY) LTD (registration number 2026/572774/07)