Legal

Cookie Policy

Last updated: 28 March 2026

1. What Are Cookies

Cookies are small text files that a website places on your device (computer, tablet, or smartphone) when you visit it. They are widely used to make websites work efficiently, remember your preferences, and provide information to the website owner about how the site is being used.

Cookies can be session cookies — deleted when you close your browser — or persistent cookies, which remain on your device until they expire or you delete them. They can also be classified by origin: first-party cookies are set by the website you are visiting directly, while third-party cookies are set by a different domain (such as an analytics or payment provider).

This Cookie Policy explains what cookies Loyalti uses on loyalti.my and the Platform, why we use them, and how you can control them. For broader information about how we use personal data, please see our Privacy Policy.

2. Cookies We Use

The table below lists all cookies currently set on the Loyalti Platform, along with their purpose, duration, and category.

Cookie Name	Provider	Purpose	Duration	Type
`supabase-auth-token`	Supabase	Stores your authentication session so you remain logged in	Session	Essential
`loyalti_locale`	Loyalti	Remembers your preferred language (English / Bahasa Malaysia)	1 year	Functional
`theme`	Loyalti	Saves your dark or light mode preference	1 year	Functional
`_ga`	Google Analytics	Distinguishes unique users for aggregate usage statistics	2 years	Analytics
`_gid`	Google Analytics	Tracks page sessions within a 24-hour window	24 hours	Analytics

Note: We do not currently use advertising cookies or any cookies for targeted marketing purposes. If this changes, we will update this policy and notify you in advance.

Cookie Categories Explained

Essential

Required for the Platform to function. Cannot be disabled without breaking core functionality such as login.

Functional

Enhance your experience by remembering your preferences (language, theme). Optional but recommended.

Analytics

Help us understand how visitors use the Platform so we can improve it. Fully optional and can be disabled without affecting core functionality.

3. Third-Party Cookies

Some cookies on the Platform are set by third-party services we rely on. We have no direct control over these cookies — they are governed by the respective provider's privacy and cookie policies:

Supabase

We use Supabase for database hosting and user authentication. Supabase sets the supabase-auth-token cookie to maintain your authenticated session. This is an essential cookie and cannot be disabled while you are logged in. Supabase Privacy Policy: supabase.com/privacy.

Stripe

We use Stripe for payment processing on Vendor subscription pages. Stripe may set cookies for fraud prevention and payment security. These cookies are only active on payment-related pages. Stripe Privacy Policy: stripe.com/privacy.

Google Analytics

We use Google Analytics (optional) to understand aggregate usage patterns — such as which pages are most visited and how long users spend on the Platform. Google Analytics uses the _ga and _gid cookies. You can opt out using the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout. Google Privacy Policy: policies.google.com/privacy.

4. Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to view, delete, and block cookies. Below are links to the cookie management instructions for common browsers:

Google Chrome: support.google.com/chrome/answer/95647
Apple Safari: support.apple.com — Manage cookies in Safari
Mozilla Firefox: support.mozilla.org — Enhanced Tracking Protection
Microsoft Edge: support.microsoft.com — Delete cookies in Edge

Please note that browser settings apply globally to all websites you visit, not just Loyalti. For more information about cookies and how to manage them generally, visit allaboutcookies.org.

5. Impact of Disabling Cookies

Different cookies have different impacts if disabled:

Essential Cookies — Required

Disabling essential cookies (such as supabase-auth-token) will prevent you from logging in and using the Platform. Core functionality is unavailable without these cookies.

Functional Cookies — Recommended

Disabling functional cookies (language preference, theme) means you will need to re-select your preferences on each visit. Core Platform features will continue to work normally.

Analytics Cookies — Fully Optional

Disabling analytics cookies has no impact on your ability to use the Platform. You will simply not be included in our aggregate usage statistics. We encourage you to opt out if you prefer not to be tracked.

6. Changes to This Policy

We may update this Cookie Policy from time to time — for example, if we add new features that require additional cookies, or if we change the third-party services we use. The date of the most recent update is shown at the top of this page.

For material changes that affect cookies beyond what is described here, we will provide advance notice via a banner on the Platform or by email, consistent with our Privacy Policy obligations.

7. Contact

If you have any questions about this Cookie Policy or how we use cookies on the Platform, please contact us:

Data Protection Officer

Loyalti Sdn Bhd

Email: privacy@loyalti.my