TODO: Draft under legal review — not final.
Cookie Policy
Last updated: [TBD — set at publish]
1. The short version
No advertising cookies. No cross-site trackers. No data sold to anyone. We store the minimum needed to sign you in and remember your cookie choice — and analytics only runs if you accept the banner.
2. What we store
- Sign-in session (Supabase Auth): kept in your browser's local storage so you stay signed in on /start. Removed when you sign out or clear site data.
- Cookie choice (
qv-cookie-consent): remembers whether you accepted or declined analytics, so we stop asking. Change your mind anytime by clearing site data — the banner comes back. - Analytics (only after Accept): privacy-friendly, cookieless page-view counts via Vercel Analytics. No cross-site tracking, no ad profiles. Decline the banner and nothing loads.
3. What we never do
No third-party advertising cookies, no social-media pixels, no fingerprinting, no sale of personal data. Our processors (Supabase, Vercel, Stripe, Cloudflare) set only what they need to operate, under their own policies.
4. Your control
Block or delete storage in your browser settings anytime — the site still works, you will just be signed out and asked about cookies again. Questions? Contact us.