Legal
Cookie Policy
Effective: 2026-10-07
What is a cookie?
A small piece of data stored in your browser to remember preferences and sessions.
Cookies we use
| Cookie | Purpose | Duration |
|---|---|---|
sb-access-token | Auth session | 1 hour |
sb-refresh-token | Token refresh | 30 days |
_ga, _ga_* | Google Analytics visit counting. Optional: set only on the public website, and only after you accept. | 2 years |
Your theme choice and your in-app preferences live in localStorage, not cookies, so they never travel with a request.
Managing cookies
The two Supabase auth cookies above are essential. Without them you can't stay signed in. The Google Analytics cookies are optional: the banner on the public website asks first, nothing is sent to Google before you accept, and the signed-in app is never measured. A browser sending Global Privacy Control counts as a refusal. Rejecting removes any _ga cookies already set. What is and isn't measured is spelled out at Settings → Privacy.