Indigenous Board Administrative & Governance Services logoIndigenous Board Administrative & Governance Services
Indigenous Board Administrative & Governance Services

Cookie Policy

Effective date: November 1, 2026 · Version 2026.11

This Cookie Policy explains what cookies and similar technologies are used on indigenousboardgov.com (the “website”), operated by Indigenous Board Administrative & Governance Services. It has been written to reflect the technology that is actually running on this website today, not a generic template. It is intended to be read alongside our Privacy Policy.

1. What cookies and similar technologies are

“Cookies” are small text files placed on your device by a website. This policy also covers similar technologies used by this website, including localStorage and sessionStorage(small key/value stores kept by your browser). We use the word “cookies” below to refer to all of these together, unless we say otherwise.

2. Categories of cookies we use

We group the technologies used on this website into three categories. Only the first category is set automatically. The other two are optional and are only used if you choose to enable them in the cookie banner or from the link in the site footer.

Essential (strictly necessary)

These are required for the website to work. They cannot be switched off. They do not track you across other websites and are not used for advertising.

  • Cookie consent preference — a localStorage entry named ibags-cookie-consent that remembers whether you accepted all cookies, essential only, or a custom mix. Stored on your device until you clear it or change your choice. First-party.
  • Authentication session — when an administrator or account holder signs in, the authentication provider that powers the site (Supabase Auth, operated through Lovable Cloud) stores a session token in localStorage under a key beginning with sb-. It keeps you signed in across pages and expires when you sign out or the token lifetime ends. Public visitors who never sign in do not receive this token. First-party.
  • Payment processing — pages that load a Stripe Checkout form (the certificate program registration page and the digital handbook purchase page) load scripts from js.stripe.com. Stripe sets cookies such as __stripe_mid (roughly one year) and __stripe_sid (about 30 minutes) for fraud prevention and to complete your payment. These are strictly necessary to accept payments and to protect against fraudulent card use. Third-party (Stripe, Inc.).
  • Security & hosting — the platform that hosts this website (Lovable) and its edge network may set short-lived, first-party technical cookies used to route requests and protect against abuse. These do not identify you and are not used for advertising.

Preferences (optional)

If you turn preferences on in the cookie banner, we may remember non-essential choices you make during a visit (for example, recently viewed resources) so the website feels more consistent for you. These are first-party only and are not used to profile you.

Analytics, marketing and advertising (not in use)

This website does not currently use Google Analytics, Google Tag Manager, Meta/Facebook Pixel, LinkedIn Insight Tag, TikTok Pixel, Hotjar, Mixpanel or any other analytics, marketing or advertising cookie. This website also does not currently embed YouTube, Vimeo, Google Maps, or the LearnWorlds learning platform on any public page, so no cookies from those providers are set. If we add analytics or marketing tools in the future, we will update this policy, update the cookie banner, and (where consent is required) only load those tools after you opt in.

3. Third parties that may set cookies

The only third party that sets cookies through this website today is:

  • Stripe, Inc. — payment processing for the certificate program registration and digital handbook purchase pages. Stripe’s cookie use is described in the Stripe Cookie Policy.

Supabase Auth (via Lovable Cloud) stores an authentication token in your browser’s localStorage after you sign in. It does not set third-party tracking cookies.

4. How long cookies stay on your device

  • Cookie consent preference (ibags-cookie-consent): kept until you clear your browser storage or change your choice.
  • Authentication session (sb-*): kept while you are signed in; removed when you sign out or when the session expires.
  • Stripe (__stripe_mid): up to one year; __stripe_sid: approximately 30 minutes.
  • Preferences (optional): kept until you clear your browser storage or turn preferences off in the cookie banner.

5. Your choices

You can control cookies on this website in the following ways:

  • Accept all — allow essential cookies plus optional preference cookies.
  • Essential only — allow only the cookies needed to run the website, sign-in sessions, and payments.
  • Manage preferences — turn individual optional categories on or off.
  • Change your mind at any time — reopen the settings from the link in the site footer.
  • Browser controls — most browsers let you view, block, or delete cookies for any site. Disabling essential cookies may prevent sign-in and payments from working.

Because this website does not currently run analytics, marketing or advertising cookies, no consent is required before those categories load — there is nothing there to load until we add it and update this policy.

6. Do Not Track and Global Privacy Control

We do not use tracking cookies for advertising, so “Do Not Track” and Global Privacy Control (GPC) signals do not currently change what this website loads. If we add tools in the future that respond to those signals, we will honour them in line with applicable law.

7. Changes to this policy

We may update this Cookie Policy to reflect changes to the technology used on this website or to applicable Canadian privacy law (including PIPEDA and applicable provincial privacy legislation). When we make material changes, we will update the effective date and version above.

8. Contact

Questions about this Cookie Policy can be sent to knowledge@indigenousboardgov.com.