Cookie Policy
Last Updated: January 15, 2025
1. Introduction
This Cookie Policy explains how Acme ("we," "us," or "our") uses cookies and similar technologies when you visit our website and use our service.
This policy should be read in conjunction with our Privacy Policy, which explains how we collect, use, and protect your personal data.
2. What Are Cookies?
Cookies are small text files that are stored on your device (computer, tablet, or mobile) when you visit a website. They help websites recognize your device and remember information about your visit.
Types of Storage Technologies
We use several types of storage technologies:
- Cookies: Small text files stored by your browser
- Local Storage: Browser storage for larger amounts of data
- Session Storage: Temporary storage cleared when you close your browser
- IndexedDB: Client-side database for structured data
3. Why We Use Cookies
We use cookies to:
- Enable Essential Functionality: Make the service work properly
- Enhance User Experience: Remember your preferences and settings
- Improve Performance: Understand how users interact with our service
- Analyze Usage: Gather insights to improve our features
- Ensure Security: Detect and prevent fraudulent activity
4. Types of Cookies We Use
4.1 Essential Cookies
These cookies are necessary for the service to function and cannot be disabled in our systems.
| Cookie Name | Purpose | Duration | Provider |
|---|---|---|---|
sb-auth-token | Authenticates your session with Supabase | Session | Supabase |
theme | Remembers your theme preference (light/dark mode) | 1 year | Acme |
csrf-token | Protects against cross-site request forgery | Session | Acme |
Legal Basis (GDPR): These cookies are essential for the performance of our contract with you (Article 6(1)(b) GDPR).
4.2 Functional Cookies
These cookies enable enhanced functionality and personalization but are not strictly necessary.
| Cookie Name | Purpose | Duration | Provider |
|---|---|---|---|
language | Remembers your language preference | 1 year | Acme |
sidebar-collapsed | Remembers your sidebar state | 1 year | Acme |
onboarding-completed | Tracks whether you've completed onboarding | 1 year | Acme |
Legal Basis (GDPR): These cookies are used based on your consent (Article 6(1)(a) GDPR).
4.3 Analytics Cookies
These cookies help us understand how visitors interact with our service by collecting and reporting information anonymously.
| Cookie Name | Purpose | Duration | Provider |
|---|---|---|---|
ph_* | PostHog analytics for usage insights | 1 year | PostHog |
_ga | Google Analytics (if enabled) | 2 years | |
_gid | Google Analytics (if enabled) | 24 hours |
Legal Basis (GDPR): These cookies are used based on your consent (Article 6(1)(a) GDPR).
Analytics Data:
- Page views and navigation patterns
- Feature usage and interactions
- Session duration and frequency
- Device and browser information (anonymized)
4.4 Marketing Cookies
These cookies track your activity across websites to deliver more relevant advertising (currently not in use).
We do not currently use marketing or advertising cookies. If this changes, we will update this policy and request your consent.
5. Third-Party Cookies
We use services from trusted third parties that may set their own cookies:
5.1 Supabase (Authentication & Database)
- Purpose: Authentication, session management, database access
- Cookies:
sb-*cookies for session management - Privacy Policy: https://supabase.com/privacy
5.2 Stripe (Payment Processing)
- Purpose: Secure payment processing and fraud detection
- Cookies: Various Stripe cookies for payment security
- Privacy Policy: https://stripe.com/privacy
5.3 Vercel (Hosting)
- Purpose: Content delivery, performance optimization
- Cookies: May set cookies for analytics and optimization
- Privacy Policy: https://vercel.com/legal/privacy-policy
5.4 PostHog (Analytics)
- Purpose: Product analytics and usage insights
- Cookies:
ph_*cookies for tracking and analytics - Privacy Policy: https://posthog.com/privacy
5.5 Resend (Email Delivery)
- Purpose: Transactional and marketing email delivery
- Cookies: May track email opens and clicks
- Privacy Policy: https://resend.com/legal/privacy-policy
6. Cookie Consent
6.1 Consent Management
When you first visit our service, we will display a cookie consent banner that allows you to:
- Accept all cookies
- Reject non-essential cookies
- Customize your cookie preferences
6.2 Changing Your Preferences
You can change your cookie preferences at any time by:
- Clicking the "Cookie Settings" link in the footer
- Accessing your account settings
- Contacting us at legal@example.com
6.3 Withdrawal of Consent
You can withdraw your consent at any time. However, this will not affect the lawfulness of processing based on consent before its withdrawal.
7. How to Control Cookies
7.1 Browser Settings
Most web browsers allow you to control cookies through their settings. You can:
- View and delete existing cookies
- Block all cookies
- Block third-party cookies only
- Clear cookies when you close your browser
- Set exceptions for specific websites
Common Browser Instructions:
- Chrome: Settings > Privacy and security > Cookies and other site data
- Firefox: Options > Privacy & Security > Cookies and Site Data
- Safari: Preferences > Privacy > Manage Website Data
- Edge: Settings > Cookies and site permissions
7.2 Browser Plugins
You can use browser extensions to manage cookies more granularly:
- Cookie AutoDelete
- Privacy Badger
- uBlock Origin
7.3 Analytics Opt-Out
To opt out of analytics tracking:
- PostHog: Visit your account settings and disable analytics
- Google Analytics: Use the Google Analytics Opt-out Browser Add-on
7.4 Do Not Track
Some browsers offer a "Do Not Track" (DNT) signal. While we respect your privacy preferences, we do not currently respond to DNT signals as there is no industry-wide standard for handling them.
8. Impact of Disabling Cookies
If you disable cookies, some features of our service may not function properly:
Without Essential Cookies:
- You cannot log in or maintain a session
- Security features may not work
- The service may not function at all
Without Functional Cookies:
- Your preferences will not be saved
- You may need to re-enter information repeatedly
- The user experience may be less personalized
Without Analytics Cookies:
- We cannot improve the service based on usage data
- No impact on your ability to use the service
9. Cookie Lifetime
Cookies have different lifetimes:
- Session Cookies: Deleted when you close your browser
- Persistent Cookies: Remain until expiration or manual deletion
- Short-term: 24 hours to 1 month
- Medium-term: 1 month to 1 year
- Long-term: 1 year to 2 years
We regularly review and minimize cookie lifetimes to protect your privacy.
10. Children's Privacy
Our service is not intended for children under 16. We do not knowingly collect information from children or set cookies on devices used primarily by children.
If you believe we have inadvertently collected data from a child, please contact us immediately.
11. International Transfers
Cookies may involve data transfers to countries outside the European Union. We ensure adequate protection through:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions by the European Commission
- Other approved transfer mechanisms
For more information, see our Privacy Policy.
12. Updates to This Policy
We may update this Cookie Policy from time to time to reflect:
- Changes in cookie usage
- Updates to applicable laws
- Improvements to our service
- Feedback from users or regulators
Notification of Changes:
- Updated "Last Updated" date at the top
- Email notification for material changes
- Cookie consent banner for new cookie categories
13. Your Rights (GDPR)
Under GDPR, you have rights regarding cookies and personal data:
- Right to be informed: This policy informs you about cookie use
- Right to access: Request information about cookies we've set
- Right to erasure: Delete cookies through browser settings
- Right to object: Refuse or withdraw consent for non-essential cookies
- Right to lodge a complaint: Contact your data protection authority
14. Contact Us
If you have questions about this Cookie Policy or our use of cookies, please contact us:
Email: legal@example.com
For GDPR-related inquiries, please include "GDPR - Cookies" in the subject line.
15. Additional Resources
To learn more about cookies and online privacy:
- All About Cookies: https://www.allaboutcookies.org
- EU Cookie Law: https://ec.europa.eu/info/cookies
- ICO Guidance: https://ico.org.uk/for-organisations/guide-to-pecr/cookies
- CNIL (France): https://www.cnil.fr