1. What cookies are
Cookies are small text files a website stores in your browser. The term in this policy also covers similar technologies such aslocalStorageandsessionStorage, which we use to keep you signed in.
2. Categories
- Strictly necessary — required to deliver the service you asked for (e.g. keep you signed in, route requests, protect against fraud). Cannot be turned off without breaking the product.
- Functional — remember preferences such as theme, last-used view, dismissed banners.
- Analytics — measure how the product is used so we can improve it.
- Marketing — we do not currently run marketing or advertising cookies.
3. What we use today
The actual inventory at the time of writing. We'll keep this table honest.
| Technology | Provider | Category | Purpose | Duration | Consent required? |
|---|---|---|---|---|---|
| sb-* (localStorage) | Supabase Auth (via Lovable Cloud) | Strictly necessary | Keep you signed in and refresh your session | Until sign-out | No |
| Theme & UI preferences | Get Text Formula | Functional | Remember layout, last route, dismissed banners | Up to 12 months | No |
| Stripe Checkout cookies | Stripe | Strictly necessary (when used) | Run the embedded checkout iframe and prevent fraud | Set only on Stripe domains during checkout | No |
| Product analytics events | Google Analytics 4 (consent-gated) + PostHog (server-side relay) | Analytics | Aggregate, pseudonymous event counts (server-side relay; no third-party cookies set in your browser today) | Server-side only | Consent where required by local law |
4. Consent & controls
Get Text Formula ships Google Analytics 4 with Consent Mode v2 (advanced). Defaults are region-aware: in the EEA, UK and Switzerland everything except strictly-necessary security signals starts as denied; outside those regions analytics defaults to granted while ads stay denied until you opt in. Your choice is persisted locally and applied on every page load.
5. Browser settings
Every major browser lets you view, block, and delete cookies and local storage. Blocking strictly necessary cookies will break sign-in and checkout. For step-by-step instructions, search "manage cookies" in your browser's help — Chrome, Safari, Firefox, Edge, Brave, and Arc all provide first-party docs.
6. Global Privacy Control
Where applicable (notably for California residents) we will honor a Global Privacy Control (GPC) signal as a valid opt-out of "sale or sharing" — even though, today, we do not sell or share personal information for cross-context behavioral advertising.
7. Changes
When the cookie inventory changes, we update this table and the "Last updated" date at the top. Material changes (e.g. a new analytics SDK) will be announced in the product before they take effect.
This page is written for clarity, not as legal advice. For specific questions about your rights, your contract, or applicable law, please consult qualified legal counsel in your jurisdiction.