Cookie Policy
Short version: we use essential cookies only. No analytics cookies, no advertising cookies, no cross-site tracking. That is why you don’t see a cookie banner here — strictly necessary cookies don’t require consent under UK PECR.
Cookies we set
| Cookie | Purpose | Duration |
|---|---|---|
| sb-* | Supabase authentication — keeps you signed in to your dashboard after a magic link. | Session / up to 1 year |
| __cf_bm, _cfuvid | Cloudflare security — bot protection for the site. Set by Cloudflare, our CDN. | Up to 30 minutes |
Third-party pages
Payment pages are hosted by Stripe (checkout.stripe.com, billing.stripe.com) and use Stripe’s own essential cookies under Stripe’s cookie policy.
Managing cookies
You can delete or block cookies in your browser settings. Blocking the essential ones will sign you out and may break bot protection, but the public site and free scan will still work.
Analytics without cookies
We measure product usage with PostHog (EU) configured in cookieless mode: it stores nothing on your device — no cookies, no localStorage identifiers. That’s why analytics doesn’t appear in the table above and no consent banner is required.
Changes
If we ever introduce cookies beyond the essential ones above, we will update this page first and ask for consent where required.