Cookie Policy

1. What cookies are

Cookies are small text files placed on your device by websites you visit. Similar technologies include local storage and session storage in your browser. We use both.

2. Cookies we use

Strictly necessary

• Authentication session - keeps you signed in (Supabase auth token, stored in local storage).
• Security - CSRF and request integrity.
• Load balancing - routes requests to the right server.

These cannot be disabled - the Service will not work without them.

Preferences

• UI preferences such as collapsed sidebar or selected workspace scope.

Analytics

• Aggregated, anonymous usage data to help us understand which features are used.

3. Third parties

Some cookies are set by third parties acting as our processors - for example our payment processor (Stripe) on billing pages, and our error monitoring provider. They process data on our behalf under written contracts.

4. Controlling cookies

You can clear or block cookies through your browser settings. Blocking strictly necessary cookies will prevent you from signing in. If we introduce non-essential marketing cookies, we will ask for your consent first.

5. Changes

We will update this page whenever we add or remove cookie categories.