The short version

Affectly sets only the cookies needed to keep you signed in. We run no advertising cookies, no analytics cookies, and no advertising or social media trackers. Our product analytics (PostHog) is deliberately configured to store nothing on your device at all. When a link carries utm_source, utm_medium or utm_campaign, those three labels are sent with that visit's events. We record that you left a page as the page path only, never the query string, and the page that linked you here as the site and path only. A link with internal=1 marks that visit's events so our own testing can be filtered out, and that mark does not create an analytics profile. None of that is written to your device. That is why you have never seen a cookie banner on this site: there is genuinely nothing to consent to.

1. What Cookies Are

A cookie is a small text file a website asks your browser to store and send back on later visits. Cookies that are essential to a service you asked for (such as remembering that you are logged in) can be set without your permission. Cookies used for advertising, tracking, or analytics generally cannot: those need your consent first, under the UK and EU ePrivacy rules and similar laws elsewhere.

2. The Cookies We Set

Every cookie in the table below is strictly necessary. They are set by our authentication provider, Supabase, on our own domain. There are no others.

Cookie	Purpose	Expires
`sb-<project>-auth-token`may be split across `.0`, `.1` when large	Holds your signed session so you stay logged in between page loads and visits. Without it you would be signed out on every navigation.	On sign out, or when the session expires
`sb-<project>-auth-token-code-verifier`	A short lived security value used only while you are completing a sign in, to prove the login that finishes is the one you started. Protects against sign in interception.	Within minutes, as soon as sign in completes

<project> is our Supabase project identifier, so the exact name you see in your browser will contain a short code.

3. Cookies We Do Not Set

To be explicit, Affectly does not use any of the following:

Advertising or retargeting cookies
Third party analytics cookies (we use no Google Analytics, Meta Pixel, or similar)
Social media share or embed widgets that set cookies
Cross site tracking of any kind
Session recording or heatmap tools

We measure how the product is used from our own database, using data already tied to your account, not by tracking you across other websites.

4. Local Storage

Some of your settings are kept in your browser's local storage rather than in cookies. Local storage is never automatically transmitted to a server the way a cookie is; it simply stays on your device. We use it for things like whether you have already seen our welcome screens. Clearing your browser data removes it.

Your "How I learn" presentation preferences are kept there too, but they are not only on your device. If you are signed in, they are also saved to your account on our servers so that they follow you between devices. Clearing your browser data removes the local copy but not that one. You can change or clear these preferences at any time in Settings.

5. Managing Cookies

Because we set no nonessential cookies, there is no preference panel for you to change. You can still block or delete cookies through your browser settings at any time, but note that blocking our session cookies will stop you from being able to sign in and stay signed in.

Most browsers let you manage this under Settings → Privacy. You can also use private or incognito browsing, which clears cookies when you close the window.

6. If This Ever Changes

If we ever introduce a cookie that is not strictly necessary, we will ask for your consent before setting it, give you a way to withdraw that consent that is as easy as giving it, and update this page and our Privacy Policy before we do so. We will not quietly start tracking you.

7. Contact

Questions about this policy? Email origae.dev@gmail.com.

Cookie Policy