Cookie Policy

This Cookie Policy explains how Island Index uses cookies and similar technologies when you visit https://islandindex.mv. We only use cookies that are strictly necessary to make the site work securely.

1. What are cookies

Cookies are small text files placed on your device by websites you visit. They help the site remember your preferences and keep you signed in securely. Some expire when you close your browser; others last for a set period.

2. How we use them

Island Index does not use marketing or analytics cookies, and we have no third-party tracking scripts or advertising pixels. The cookies we set are only those required for core functionality and security, including authentication and session continuity.

Separately from cookies, images and post text you submit are sent to third-party automated screening and AI services to check content before it is published. That is a transfer of content for moderation, not tracking, and it is described in section 5 of our Privacy Policy.

3. Strictly necessary cookies

We set two cookies. Both exist for one purpose: to keep you signed in. Nothing else about you is stored in a cookie.

ISLANDSESSID

This is the session cookie, and it is set as soon as you sign in. It keeps your session active while you are using the site, and it is discarded when you close your browser. It is marked HttpOnly, so scripts on the page cannot read it, and SameSite=Lax, so your browser does not send it along with requests originating from other sites.

island_remember

This cookie is set only if you select "Stay logged in" when you sign in. It allows you to stay signed in after closing and reopening your browser, instead of having to sign in again each time. It lasts up to one year from the day it is issued. It is removed straight away if you log out, if you revoke the device from your security settings, or if you change your two-factor settings. Like the session cookie, it is marked HttpOnly and SameSite=Lax.

These are the only cookies the site sets. They are strictly necessary to provide the services you requested, so you cannot opt out of them without preventing sign-in.

No cookie is used for cross-site request forgery (CSRF) protection. Our CSRF token is held in your server-side session and delivered inside page forms, not in a cookie, so it is never attached to requests automatically by the browser.

4. Third-party cookies and third-party requests

We do not embed advertising or analytics networks in the public pages, and no third-party network sets tracking cookies while you simply browse. There are two third-party connections worth explaining, and both are visible below.

4.1 Fonts loaded from Google

This site loads its text font (Inter) from Google's font servers, so every page you open makes a connection to Google. That connection necessarily tells Google which page you are on and your IP address, which is why it is described here rather than left out.

No cookie is set by this, and nothing about your visit is sent to Google beyond the fact that a font was requested. If you would prefer that no connection to Google happens at all, you can block requests to fonts.googleapis.com and fonts.gstatic.com in your browser or content blocker; the site will fall back to your system's default font and remain fully usable.

4.2 Google sign-in

If you click "Continue with Google", your browser is briefly sent to Google's own sign-in pages, and Google sets cookies there to keep you signed in on its service. We do not read, control or store those cookies, and we do not use them to track you. We store only the small set of details listed in section 2.2 of the Privacy Policy — your name, your email address and your profile picture — and we do not keep your Google access token after reading them.

Nothing about Google sign-in is loaded until you choose it. The "Continue with Google" button is drawn entirely on our own page, so the button alone does not contact Google, and if you would rather we did not use Google at all, ignore the button and sign in with your email address and password; nothing about your account works differently.

4.3 Other third-party features

If a third-party feature is ever added that sets its own cookies, this policy and the Privacy Policy will be updated and, where the law requires it, consent will be requested first.

5. Controlling cookies

Most browsers allow you to block or delete cookies. If you block strictly necessary cookies, some features (including sign-in and account security) may not work. You can manage your preferences in your browser settings. For guidance, see your browser's help pages.

6. Changes to this policy

If we ever add non-essential cookies, we will update this policy and ask for consent where required. The date at the top always reflects the latest version.

7. Contact us

Questions about this Cookie Policy? Contact us at:

• Island Index
• Registered address: to be published. Contact us using the details below and we will provide it in writing.
• Email: [email protected]
• Help Center: https://islandindex.mv/help