Cookie Policy
Last updated: August 31, 2026
This Cookie Policy explains how LaPai Management Solutions & Consulting LLC (“LaPai,” “we,” “us,” or “our”) uses cookies and similar browser-based storage when you visit our Platform. There are five things in total, listed individually in section 3. Two are needed for the site to work, two are analytics that we do not use unless you agree to them, and one belongs to our payment processor and is set on their own website rather than ours.
1. Cookies, Local Storage and Session Storage
Cookies are small text files placed on your device by a website. We also use browser local storage and session storage, which store data directly in your browser rather than as traditional cookie files. The practical difference is that a cookie is sent back to the server with each request, while local and session storage stay in the browser until something on the page reads them. Local storage survives closing the tab; session storage does not.
We describe all three here because the law and, more to the point, your expectations, treat them the same way: they are all data kept on your device between page visits, and all of them are listed in section 3 regardless of which form they take.
2. Your Choice, and What Happens Before You Make It
We ask before we use analytics. Until you agree, no analytics identifier is created or stored in your browser and no page view or listing link click is recorded. With consent, we count page views and clicks on contact, social and booking links on Elite listings. Elite businesses see aggregate activity for their own listing, without visitor identifiers. The two analytics items in section 3 are created only after consent.
If you decline, the site works normally. Analytics is the only thing your choice governs; the sign-in session and the record of the choice itself are strictly necessary and are covered below.
You can change your mind at any time, in either direction, from this page. Withdrawing consent stops further analytics collection and clears the identifiers from your browser. Because the visitor identifier is random and is not linked to your account, withdrawing it means new activity is no longer associated with the identifier you had; if you would like the events already recorded against it deleted as well, email us at the address in section 7 and we will remove them.
Checking your current setting…
Your choice is remembered per browser and per device, because it is stored in the browser making the request. Signing in does not carry it across to another computer or another browser, and clearing this site’s data erases the record of it — which is why, after clearing site data, you will be asked again.
3. What We Use & Why
Essential — Authentication Session
RequiredWhat it does: Keeps you signed in as you move between pages. The business dashboard, the admin area and the internal analytics dashboard are all reached through this one ordinary session — there is no separate staff password and no second cookie gating them, only the role attached to your account.
Type: Cookies set by Supabase, our authentication provider, on this domain. Their names begin with sb-.
Duration: It lasts while you are signed in and is refreshed automatically as you browse. Signing out clears it. We publish no fixed number of days here rather than one we cannot stand behind.
Set before you consent? Yes — but only if you sign in. It is created by the act of signing in, and a visitor who never signs in never receives one.
Can you disable it? Not separately. Blocking it means you cannot sign in, reach a dashboard, or complete a purchase.
Essential — Your Cookie Choice
RequiredWhat it does: Records whether you agreed to analytics, so we can honour that answer and stop asking. It holds your answer and nothing else — it is not an identifier, it is not sent to advertisers, and it cannot be used to recognise you anywhere else.
Type: Stored in your own browser on this domain.
Duration: Kept until you change your choice or clear this site’s data.
Set before you consent? This is the one thing that has to be. There is no way to remember that you said no without writing down that you said no; storage used solely to record a privacy choice is treated as strictly necessary for exactly that reason.
Can you disable it? You can clear it with the rest of this site’s data. Doing so does not opt you in — it erases the answer, so you will be asked again.
Analytics — Visitor Identifier
AnalyticsName: lapai_visitor_id
What it does: Holds a randomly generated identifier so that repeat visits from this browser can be counted as one visitor rather than several. It is a random value with no meaning of its own: it is not derived from your name, your email, your account or your device, and the table these events are written to has no column for your account, your IP address or your browser’s user agent.
Type: Local storage on this domain.
Duration: Persists across visits and across browser restarts until you withdraw consent or clear this site’s data. It carries no expiry date of its own.
Set before you consent? No. Nothing is written until you agree.
Can you disable it? Yes — decline analytics, or withdraw your consent later from section 2 of this page. You can also clear this site’s data in your browser at any time.
Analytics — Session Identifier
AnalyticsName: lapai_session_id
What it does: Holds a second randomly generated identifier covering one browsing session, so that a single visit can be told apart from a return visit a week later. Like the visitor identifier, it is random and is not linked to any personal information.
Type: Session storage on this domain, which is per-tab: a second tab gets its own value.
Duration: Cleared when you close the tab.
Set before you consent? No. Nothing is written until you agree.
Can you disable it? Yes — the same choice governs it. It also clears itself when the tab closes.
Third-Party — Stripe (Payments)
Third-PartyWhat it does: When you buy a document or a listing plan, we hand you off to Stripe’s own hosted checkout page to pay. Stripe sets its own cookies there to prevent fraud, keep your place in the checkout, and secure the transaction.
Whose site sets them: Stripe’s, on Stripe’s checkout domain — not this one. There is no Stripe script, frame or tag on any LaPai page, so nothing of Stripe’s is loaded while you browse the directory. Your card details are entered on Stripe’s page and never reach this site or its database.
Duration: Set and managed by Stripe under their own policy, not ours.
Can you disable it? Not through this page — they are not ours to set or clear. They are also unavoidable if you want to pay, in the way that a payment page is unavoidable if you want to pay.
More information: stripe.com/privacy
4. What Analytics Actually Records
If you consent, each page view writes one row containing the two random identifiers above, the fact that the event was a page view, the path of the page within this site, and the referring address your browser reports — the page you followed a link from, which is a value your browser sends and which may name another website.
That is the whole record. There is no IP address, no browser or device fingerprint, no account identifier, no mouse or scroll tracking, and no session recording. Pages under /admin are excluded entirely and generate no events at all.
These rows are stored in our own database, hosted with Supabase in the United States, and are read only by our administrators through the internal dashboard.
5. What We Do NOT Use
This site contains no advertising technology, no third-party analytics and no cross-site tracking of any kind. Specifically, there are none of the following anywhere on the Platform:
- Advertising, retargeting or conversion cookies
- Social media tracking pixels (Facebook, Instagram, TikTok, X and the rest)
- Third-party analytics platforms — no Google Analytics, no Mixpanel, no tag manager, no heatmap or session-replay tool
- Anything that tracks you across other websites, or that lets another company recognise you here
- Sign-in through Facebook, Google or any other social account, which is why no social provider sets anything here — the only way to sign in is an email address and a password
The analytics described in section 4 are collected and processed by us, in our own database. We do not sell behavioural data and we do not share it with advertisers or data brokers.
6. Managing Storage in Your Browser
Section 2 is the direct route: it changes your analytics choice here and now, and it is the one we would point you at first. Your browser gives you a broader tool, which clears everything this site has stored, including the record of your choice:
Google Chrome
Settings → Privacy and security → Cookies and other site data
Safari
Preferences → Privacy → Manage Website Data
Firefox
Settings → Privacy & Security → Cookies and Site Data
Microsoft Edge
Settings → Cookies and site permissions → Cookies and site data
Two things worth knowing before you use it. Clearing site data signs you out, because it removes the authentication cookie along with everything else. And it erases your saved cookie choice rather than reverting it to “no”, so you will be asked again on your next visit.
Blocking storage for this domain outright is also supported, in the sense that the site handles it without breaking: analytics is skipped when the browser refuses to store an identifier. You will not be able to sign in, however, since the sign-in session has nowhere to live.
7. Changes to This Policy
We may update this Cookie Policy as we add features or as regulations change. The revised version is posted on this page with a new date at the top. If a change means we would start using something in a category you have already declined, we will ask again rather than treat an old answer as covering it.
8. Contact
Questions about our use of cookies, or a request to delete analytics events already recorded against your identifier?
LaPai Management Solutions & Consulting LLC
Email: Lapaisolutions@gmail.com
See also our Privacy Policy and Terms of Service.