Cookie Policy
1. What This Covers
A cookie is a small file a website asks your browser to keep. Some are needed for a site to work at all — to know you are signed in, or to check that a form came from you and not from an attacker. Others exist to watch what you do.
This policy lists every cookie and browser store Yellowkey uses, what each one is for, and how long it lasts. It sits alongside our Privacy Policy, which covers personal data more broadly.
2. Consent Comes First
Under Qatar's Personal Data Protection Law (PDPPL, Law No. 13 of 2016) we ask before storing anything that is not strictly necessary. So:
- On your first visit a banner appears. Nothing is tracked until you answer it. No analytics script is loaded while the banner is still open.
- Press Accept and analytics may load. Press Reject and it never does — we also clear any tracking cookie already present.
- Either answer is remembered for 365 days, after which we ask again.
- Essential cookies are set regardless. Without them you cannot sign in or submit a form, so there is nothing to consent to.
3. Essential Cookies
Set for everyone. They carry no advertising identifier and are never shared.
| Name | Purpose | Lifetime |
|---|---|---|
sessionid |
Keeps you signed in and holds your session. Expires after one hour of inactivity. | Session |
csrftoken |
Proves a form or action came from you, not from another site posing as you. | 1 year |
messages |
Carries a one-off confirmation or error notice across a page redirect, then deletes itself. | Until read |
yk_cookie_consent |
Your answer to the consent banner. Stored in your browser's local storage, not sent to our servers. | 365 days |
4. Analytics Cookies
These load only after you press Accept. If you have not accepted, or you pressed Reject, no analytics script runs on any page you visit. All of them are set by Google Analytics.
| Name | Purpose | Lifetime |
|---|---|---|
_ga |
Distinguishes one visitor from another so we can count visits. | 2 years |
_ga_<id>, _gid |
Holds the state of the visit and counts the day's visitors. | 24 hours – 2 years |
_gat |
Limits the rate of requests sent. | 1 minute |
Where analytics is running, IP addresses are anonymised before they are recorded, and we look only at aggregate figures — which pages are read, which zones are searched. We do not use it to identify you.
5. Advertising Cookies
We set none. Yellowkey runs no advertising network, no retargeting pixel, and no cross-site profiling. We do not sell or rent your data to anyone. If you press Reject, we additionally clear any advertising cookie left in your browser by an earlier visit, including _fbp, _fbc, and fr.
6. Third Parties That See Your Request
A few services are loaded from other domains. They receive your IP address and browser details because your browser has to ask them for the file, even where they set no cookie:
- Google Fonts (fonts.googleapis.com, fonts.gstatic.com) — the typefaces used across the site.
- Mapbox (api.mapbox.com) — the map tiles, loaded only on pages that show a map.
- Google Analytics (googletagmanager.com) — only after you accept, as described above.
Links to our Facebook, Instagram, YouTube, and LinkedIn pages are ordinary links. Nothing is embedded from those networks and they see nothing until you click through.
7. Changing Your Mind
Your answer to the banner lives in your own browser, so you control it:
- Clear site data for www.yellowkey.qa in your browser settings. The banner returns on your next visit and you can answer again.
- Or block and delete cookies for this site through your browser's privacy settings — Chrome, Safari, Firefox, and Edge all offer per-site controls.
- Blocking essential cookies will stop you signing in and submitting forms. That is a limitation of how the web works, not a choice we made.
To ask what personal data we hold, or to have it deleted, use the privacy request form.
8. Contact Us
- Email: privacy@yellowkey.qa
- Phone: +974 3033 0067
- Address: Yellowkey Holdings, 534 Al Sadd, Doha, Qatar
We answer privacy enquiries within 30 days, as PDPPL requires.