Cookie Policy

1. Introduction

Site Safe Hub (“we”, “us”, “our”) is a construction site safety and compliance management platform operated by WorkDoc360. This Cookie Policy explains how we use cookies, local storage, and similar technologies when you visit our website at sitesafehub.com or use our web application at app.sitesafehub.com.

This policy should be read alongside our Privacy Policy and Terms of Service.

2. What Are Cookies?

Cookies are small text files that are stored on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites work more efficiently, provide a better user experience, and give website operators information about how their site is being used.

In addition to traditional cookies, modern web applications use other browser storage mechanisms such as localStorage, sessionStorage, and service worker caches. These serve similar purposes and are covered by this policy.

3. How We Use Cookies and Local Storage

We categorise our use of cookies and similar technologies into three groups:

3.1 Essential (Strictly Necessary)

These are required for the platform to function correctly. Without them, you would not be able to log in, navigate between pages, or use core features. You cannot opt out of essential technologies as the platform cannot operate without them.

3.2 Functional

These remember your preferences and choices to provide a more personalised experience. For example, remembering which site you last selected or your preferred view settings. Disabling these will not prevent you from using the platform, but may reduce the quality of your experience.

3.3 Analytics

These help us understand how visitors interact with our website and application so we can improve the user experience. Analytics data is aggregated and anonymised wherever possible. We do not currently use third-party analytics cookies. If we introduce them in the future, this policy will be updated and your consent will be sought.

4. Specific Technologies We Use

The following table details the specific cookies, local storage items, and caching technologies used by Site Safe Hub.

4.1 Authentication and Session Management

Name / Key	Type	Purpose	Duration	Category
`accessToken`	localStorage	Stores your JSON Web Token (JWT) used to authenticate API requests. This keeps you logged in as you navigate the application.	Until logout or token expiry (typically 15 minutes)	Essential
`refreshToken`	localStorage	Stores a longer-lived refresh token used to obtain a new access token when the current one expires, without requiring you to log in again.	Until logout or token expiry (typically 7 days)	Essential

Note: Our authentication tokens are stored in your browser’s localStorage rather than as traditional HTTP cookies. They function similarly to session cookies but are managed by our application code. These tokens contain no personal data other than your user identifier and role.

4.2 Application State and Preferences

Name / Key	Type	Purpose	Duration	Category
`site-filter-store`	localStorage (Zustand)	Remembers your selected site filter so that when you navigate between pages, the platform continues to show data for the site you are working on.	Persistent until cleared	Functional
`auth-store`	localStorage (Zustand)	Stores authentication state including your user profile data for the current session, enabling the interface to display your name, role, and organisation.	Until logout	Essential
`kiosk-store`	localStorage (Zustand)	Stores kiosk mode state for site entry terminals, remembering the selected site and kiosk configuration.	Persistent until cleared	Functional

4.3 Data Caching

Name / Key	Type	Purpose	Duration	Category
`TanStack Query cache`	In-memory (JavaScript)	Caches API responses in browser memory to reduce loading times and provide a smoother experience when navigating between pages. This cache is not written to disk and is cleared when you close the browser tab.	Current browser session only	Functional

4.4 Progressive Web App (PWA) and Service Worker

Name / Key	Type	Purpose	Duration	Category
`Service Worker cache`	Cache Storage API	Caches application assets (HTML, CSS, JavaScript, images) so the platform can load quickly on repeat visits and provide limited offline functionality. This is a standard feature of progressive web applications.	Until the service worker is updated or unregistered	Essential
`Offline data queue`	IndexedDB / Cache Storage	Stores data created while offline (e.g. site sign-ins, inspection records) so it can be synchronised with the server when connectivity is restored.	Until successfully synced	Essential

5. Third-Party Cookies

Site Safe Hub does not currently use any third-party cookies for advertising, remarketing, or cross-site tracking purposes.

Our website may use the following third-party services that could set their own cookies:

Google Fonts — We load the Inter font family from Google Fonts. Google may set cookies or collect usage data when fonts are loaded. See Google’s Privacy Policy for details.

If we introduce additional third-party services in the future (such as analytics or support chat tools), we will update this policy accordingly and obtain your consent where required by law.

6. Managing and Disabling Cookies

You have several options for controlling cookies and local storage:

6.1 Browser Settings

Most web browsers allow you to control cookies through their settings. You can typically:

View what cookies are stored and delete them individually or in bulk
Block all cookies or only third-party cookies
Clear cookies and local storage when you close the browser
Set the browser to notify you when a cookie is being set

Here are links to cookie management instructions for popular browsers:

6.2 Clearing Application Data

To clear all Site Safe Hub data stored in your browser (localStorage, service worker caches, and IndexedDB), you can:

Log out of the application (this clears authentication tokens)
Use your browser’s developer tools to clear site data for app.sitesafehub.com
Uninstall the PWA if you have installed it on your device

6.3 Impact of Disabling Cookies and Local Storage

Please be aware that disabling or clearing these technologies will have the following effects:

Essential items: You will be unable to log in or use the application. The platform requires authentication tokens to function.
Functional items: Your preferences (such as site filter selection) will be reset each time you visit. The application will still work but may be less convenient.
Service worker / PWA: The application will not work offline and may load more slowly on repeat visits.

7. Consent

Under UK data protection law (the UK GDPR and the Privacy and Electronic Communications Regulations 2003, as amended), strictly necessary cookies and similar technologies do not require your consent. These are essential for providing the service you have requested.

For functional technologies, we rely on our legitimate interest in providing you with a good user experience. You can disable these through your browser settings as described above.

If we introduce analytics or marketing cookies in the future, we will implement a cookie consent mechanism and obtain your explicit consent before setting those cookies.

8. Data Protection

Information collected through cookies and local storage is processed in accordance with our Privacy Policy. Key points:

Authentication tokens contain only your user identifier, role, and organisation identifier — no sensitive personal data.
All data transmitted between your browser and our servers is encrypted using TLS (HTTPS).
Local storage data remains on your device and is not transmitted to us except as part of normal authenticated API requests.
We do not sell, trade, or share cookie data with third parties for advertising purposes.

9. Changes to This Policy

We may update this Cookie Policy from time to time to reflect changes in our technology, legal requirements, or business practices. When we make changes, we will update the “Last updated” date at the top of this page.

For significant changes — such as introducing new categories of cookies or third-party tracking — we will provide a prominent notice on our website or within the application.

10. Contact Us

If you have any questions about this Cookie Policy or our use of cookies and similar technologies, please contact us:

Email: [email protected]
Company: Site Safe Hub (powered by WorkDoc360)

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been violated. The ICO can be contacted at ico.org.uk.