Cookie Policy

Signing in and staying signed in currently works through your browser's local storage, provided by our authentication system (Supabase) — not through a cookie. This is required for the service to work at all (for example, to know you're signed in when you load a page), and it cannot be switched off through the analytics preference described below.

We do not currently set any other “necessary” first-party cookie of our own.

Google Analytics (GA4)is optional, and is only activated after you affirmatively accept analytics — either by choosing “Accept all” on the cookie banner, or by turning Analytics on in Cookie preferences. Before that choice, the GA4 script is not loaded at all, and no GA4 cookie is set.

Once GA4 is active, it may set the following first-party cookies on this domain:

• _ga — a client identifier used across Google Analytics properties on this domain.
• _ga_<property suffix> — per-property session state for our specific GA4 property.

We are not stating a specific retention duration for these cookies here — that is set by Google Analytics itself, not by us, and we have not independently verified an exact figure to state as fact in this policy.

Vercel Web Analytics runs at all times, independent of the analytics choice above. Based on our review, it is cookieless and does not set a cookie of its own — see our Privacy Policy for the fuller explanation, including why we are not treating that as a final legal conclusion on its own.

• Accept all — turns Analytics on, in addition to necessary technologies.
• Reject all — keeps Analytics off; only necessary technologies are used.
• Manage preferences — lets you choose Analytics on or off individually before saving.

After you've made a choice, you can change it at any time using the “Cookie preferences” link in the footer of every page, or the button below.

When you change Analytics from accepted to rejected, we stop Google Analytics from collecting further data and clear the GA4 cookies listed above from this domain. When you turn Analytics back on, GA4 is allowed to run again for anything that happens after that point — we do not retroactively send data for the time analytics was off.

Necessary technologies (see section 1) are never affected by this choice and cannot be turned off here.

Some information is stored in your browser's local storage rather than as a cookie. Local storage is a different browser mechanism to a cookie — it is not automatically sent to our servers with every request the way a cookie can be, and we do not call any of the items below a “cookie”.

• to.consent — your cookie/analytics consent choice and its version, for example: {"version":"1","analytics":true}. This never contains your email, user ID, or any prompt content — only the choice itself and which version of our consent settings it was made under.
• Your default optimisation style and model target, if set on the Preferences page.
• Your signed-in session, managed by our authentication provider (Supabase) — required for you to stay signed in.