1. What cookies are
Cookies are small text files stored in your browser by the websites you visit. They let a site recognize your browser across requests — for example, to keep you signed in or remember a setting. Similar technologies (local storage, pixels) work the same way for the purpose of this policy.
2. How we use cookies
Strictly necessary
These cookies are required for the Service to function. They keep you signed in, remember your CSRF token, and protect against fraud. You can’t opt out of strictly necessary cookies and still use the dashboard.
sb-access-token,sb-refresh-token— authentication (Supabase).__Host-csrf— CSRF protection for the dashboard.
Functional
These remember preferences such as your theme, sidebar state, and recently selected workspace. They make the product more pleasant but aren’t required.
theme— light/dark/system preference.sidebar-collapsed— whether the sidebar is collapsed.
Analytics
We use Google Analytics, a third-party analytics service, to understand which pages and features get used and where visitors get stuck. Google sets cookies such as _ga and _ga_* to distinguish visitors and sessions. We do not use analytics cookies for advertising, and you can opt out using your browser’s cookie controls or the Google Analytics opt-out browser add-on.
Attribution
When you visit our marketing site, we set a first-party bryka_attr cookie that stores a randomly generated visitor id, the UTM parameters and referrer that brought you here, and your landing page. It lasts 90 days and lets us measure which marketing channel is working. It’s first-party only — we never share it with third-party ad networks — and if you sign up, we link it to your account so we can understand acquisition.
3. Third-party cookies
Google Analytics (see “Analytics” above) sets third-party cookies to measure site usage. Some pages also embed content or integrations from other third parties (for example, payment forms from Stripe or auth flows from identity providers). Those parties may set their own cookies, governed by their own policies.
4. Your choices
Most browsers let you block or delete cookies. You can also use private browsing or disable JavaScript, though either will limit your use of the Service. We respect the “Global Privacy Control” signal where applicable.
5. Do Not Track
We do not respond to legacy DNT browser signals because there is no consensus standard for what they mean. We do honor more recent signals such as Global Privacy Control.
6. Updates
We may update this Cookie Policy when we add or remove cookies. Material changes will be announced at least 14 days before they take effect.
7. Contact
Questions? Email privacy@bryka.ai.