Article 1. What are cookies?
Cookies are small text files that are placed on your device (computer, tablet, smartphone) when you visit a website. They are widely used to make websites function properly, improve user experience, provide analytics data to the website operator and remember user preferences across sessions. Cookies may be set by the website you are visiting (first-party cookies) or by third-party services that operate on the website (third-party cookies). Cookies can be session cookies, which are deleted when you close your browser, or persistent cookies, which remain on your device for a defined period or until you delete them manually.
Article 2. How IONA JETS uses cookies.
The IONA JETS Platform uses cookies and similar tracking technologies for the following purposes:
Essential cookies (strictly necessary): These cookies are required for the basic functioning of the Platform. They enable core features such as page navigation, secure access to the Client Portal, form submission and session management. Without these cookies, the Platform cannot function properly. These cookies do not require your consent as they are strictly necessary for the delivery of the service you have requested.
Analytics cookies: These cookies collect information about how visitors use the Platform, including which pages are visited most frequently, how long visitors spend on each page, which referral sources drive traffic and whether users encounter error messages. This data helps IONA JETS understand usage patterns and improve the Platform's content, structure and performance. Analytics cookies are activated only after you provide your consent through the cookie consent banner.
Functional cookies: These cookies allow the Platform to remember choices you have made, such as your language preference, region or display settings, to provide a more personalized experience. Functional cookies may be set by IONA JETS or by third-party providers whose services are integrated into the Platform.
Marketing and advertising cookies: At the time of publication of this Cookie Policy, IONA JETS does not use marketing or advertising cookies. Should this change in the future, this Cookie Policy will be updated accordingly and your consent will be requested before any marketing cookies are activated.
Article 3. Specific cookies and storage used on the Platform.
Cookie consent storage. The Platform stores your cookie preferences in a first-party cookie named iona-consent set on the IONA JETS domain. This cookie contains your category-level choices (analytics, advertising), the timestamp of your decision and the version of the consent record. Its sole purpose is to remember your preferences across sessions and pages, and to refresh the request for consent after twelve months. It is classified as strictly necessary because it stores the legal basis for our subsequent processing.
Authentication and session storage. When you create an account or log into the Client Portal, the Platform uses browser local storage (a key named iona-auth) to maintain your authenticated session. This storage area holds the access and refresh tokens issued by our authentication provider and is required for the Client Portal to remember that you are logged in across pages. It is classified as strictly necessary and does not require consent. The Platform does not currently set persistent first-party cookies for authentication; session continuity is handled through local storage and short-lived bearer tokens.
Hosting infrastructure. The Platform is hosted on Netlify, Inc. (United States). Netlify may set technical cookies for load balancing, edge caching and security purposes (such as nf_jwt for protected functions or _netlify_session for traffic distribution). These cookies are classified as strictly necessary and do not require consent. Details on Netlify cookies are available in the Netlify Privacy Policy at https://www.netlify.com/privacy/.
Backend services (Supabase). The Platform uses Supabase (operated by Supabase Inc., United States) as its database, authentication, real-time messaging and file storage backend. Supabase does not set first-party cookies on the IONA JETS domain. All communication with Supabase occurs through authenticated API requests using bearer tokens stored in browser local storage as described above.
Google Analytics 4 cookies. The Platform uses Google Analytics 4 (GA4), a web analytics service provided by Google LLC, loaded through Google Tag Manager. GA4 sets first-party cookies including _ga and _ga_[CONTAINER_ID] to distinguish unique users and maintain session state for analytics purposes. GA4 does not log or store complete IP addresses; IP data is processed for geolocation purposes during collection only and is not retained in identifiable form. The Platform integrates with Google Consent Mode v2 and configures all four consent parameters (analytics_storage, ad_storage, ad_user_data and ad_personalization) so that GA4 tags only collect data after you provide your consent and only at the granularity you have selected. Google processes this data on behalf of IONA JETS in accordance with the Google Analytics Terms of Service. For further information, refer to the Google Privacy Policy at https://policies.google.com/privacy.
Google Tag Manager. The Platform uses Google Tag Manager (GTM), a tag management system also provided by Google LLC, to load tags such as GA4 in a controlled manner that respects your consent choices. GTM itself does not set cookies that identify users. Its sole role is to load other tags conditionally based on consent signals.
Article 3bis. Cookie inventory.
The following table lists the cookies and persistent browser storage items deployed on the IONA JETS Platform at the time of last update. This list may evolve as the Platform changes; the most current version is always available on this page. Each entry is presented in the format: name, provider, purpose, retention, category.
- (a) iona-consent, IONA JETS, stores your cookie consent choices and the timestamp of your decision so that they are respected across sessions, 12 months, strictly necessary;
- (b) iona-auth (browser local storage, not a cookie), IONA JETS / Supabase, holds Client Portal authentication tokens (access and refresh) so that you remain logged in across pages, until logout or token expiry, strictly necessary;
- (c) nf_jwt and similar Netlify session cookies, Netlify, edge load balancing and protected function authentication, session, strictly necessary;
- (d) _ga, Google, distinguishes unique visitors for Google Analytics 4 (set only after consent), 13 months, analytics;
- (e) _ga_[CONTAINER_ID], Google, maintains session state for Google Analytics 4 (set only after consent), 13 months, analytics;
- (f) _gcl_au, Google, attribution measurement for Google services (set only after consent to advertising), 90 days, advertising;
- (g) GTM container loader, Google, loads tags conditionally based on consent signals; does not set identifying cookies of its own, not applicable, strictly necessary.
Items in the strictly necessary category do not require consent and are set when needed for the Platform to function. Items in the analytics and advertising categories are blocked by default and only set after you provide consent through the cookie banner or the My Choices panel. The advertising category is currently provisioned in the consent infrastructure but no advertising cookies are actively set by IONA JETS as of the date of last update; the category is retained so that consent signals correctly reach Google Tag Manager in the event of a future change. The Global Privacy Control browser signal is honored as described in Article 7.
Article 4. Cookie consent and management.
When you first visit the IONA JETS Platform, a cookie consent banner is displayed at the bottom of the page, allowing you to accept all non-essential cookies, reject them all or customize your selection by category. No analytics or advertising cookies are activated before you make a choice. Your preferences are stored in a first-party cookie named iona-consent on your device for twelve months, after which you will be asked to renew your consent.
You can change your cookie preferences at any time by clicking the My Choices link in the footer of any page on the Platform, which reopens the cookie preferences panel and lets you adjust your selections by category. The same panel is also accessible directly at /my-choices.
The Platform integrates with Google Consent Mode v2 (analytics_storage, ad_storage, ad_user_data and ad_personalization parameters), which means your consent choices are signalled to Google services in real time and respected by Google Analytics, Google Tag Manager and any future Google advertising tags configured on the Platform. The consent banner records the time of your decision and the version of the consent record, providing an auditable trail of your choices.
You can also manage cookies through your browser settings. Most browsers allow you to block or delete cookies, set preferences for specific websites or receive notifications when cookies are being set. Please note that blocking strictly necessary cookies and storage may prevent the Platform from functioning correctly, and blocking analytics cookies will limit our ability to understand and improve your experience.
Browser-specific instructions for managing cookies are available at:
- (a) Google Chrome: chrome://settings/cookies
- (b) Mozilla Firefox: about:preferences#privacy
- (c) Safari: Preferences > Privacy
- (d) Microsoft Edge: edge://settings/privacy
Article 5. Google Analytics opt-out.
In addition to managing cookies through the consent banner or browser settings, you can opt out of Google Analytics tracking specifically by installing the Google Analytics Opt-out Browser Add-on, available at https://tools.google.com/dlpage/gaoptout. This add-on prevents the Google Analytics JavaScript from sharing visit information with Google Analytics.
Article 6. Third-party cookies and external services.
Some features of the Platform involve third-party services that may set their own cookies or process technical data on their own infrastructure. IONA JETS does not control the cookies set by these third parties and is not responsible for their data processing practices. The third parties currently integrated into the Platform are listed below. For full details on each provider's data processing, please refer to their respective privacy and cookie policies:
Article 7. Browser-level privacy signals.
Some browsers and browser extensions offer privacy signals that allow users to communicate their cookie and tracking preferences directly to websites. The IONA JETS Platform handles the most common signals as follows:
Global Privacy Control (GPC). The Platform recognizes and honors the Global Privacy Control signal. When the Platform detects that a browser is sending a GPC signal, advertising cookies are automatically blocked, the corresponding Google Consent Mode v2 parameters (ad_storage, ad_user_data, ad_personalization) are set to denied and the cookie preferences panel displays a notice confirming that the GPC signal has been received and is being honored. This applies regardless of any selection made in the cookie banner. Where the Platform processes data of California residents, the GPC signal is also treated as an opt-out request from the sale or sharing of personal information under the CCPA/CPRA, even though IONA JETS does not engage in the sale or sharing of personal information as defined under those statutes.
Do Not Track (DNT). Some browsers offer a Do Not Track setting that sends a signal to websites requesting that browsing activity not be tracked. There is currently no universally accepted standard for how websites should respond to DNT signals, and the W3C working group on DNT was discontinued in 2019. The Platform does not currently respond to DNT signals because they have been superseded by Global Privacy Control as the standard browser-level opt-out mechanism. Users who wish to manage their tracking preferences should rely on the cookie consent banner, the My Choices link in the footer of every page, or the Global Privacy Control signal supported by their browser.
Article 8. Changes to this Cookie Policy.
IONA JETS reserves the right to update this Cookie Policy at any time to reflect changes in the cookies used, the purposes for which they are used or applicable legal requirements. The most current version is always available on the Platform with the date of last update clearly indicated. Material changes will be communicated through the cookie consent banner, which will be redisplayed to request updated consent where required.
Article 9. Contact.
For any question regarding this Cookie Policy or the use of cookies on the IONA JETS Platform, please contact us at contact@ionajets.com or by post at IONA JETS, Cours des Bastions 13, 1205 Geneva, Switzerland.
Last updated: April 25, 2026.
.png){kind=small}
