Cookie Policy
Last updated: 23/07/2026
We use cookies and similar storage (localStorage, sessionStorage) to run the Service and, with your consent, to understand product usage. You control non-essential categories from the banner or the button below at any time.
Categories we use
| Category | Purpose | Basis | Retention |
|---|---|---|---|
| Strictly necessary | Sign-in session (Supabase auth token), security (CSRF), consent record. | Exempt from consent (PECR reg. 6(4)). | Session – 12 months |
| Analytics | Aggregate product usage to improve features. Off by default. | Consent (Art. 6(1)(a)) | Up to 13 months |
| Marketing | Reserved for future ad measurement. Not currently active. Off by default. | Consent (Art. 6(1)(a)) | Not applicable today |
Do Not Track / Global Privacy Control
If your browser sends a Global Privacy Control (GPC) signal, we treat it as an opt-out of analytics and marketing. This satisfies the CCPA/CPRA "Do Not Sell or Share" right, which is a right we honour globally even though we do not sell personal data.
Third-party cookies
Payment processing and OAuth sign-in with Microsoft/Google may set cookies on their own domains during checkout or connector authorisation. Those are governed by the respective providers' cookie policies.