Cookie Policy
Last updated:
The short version: We use essential cookies to keep the site working and optional analytics cookies to improve it. No ad tracking, no third-party profiling. You're in control.
01 · What Are Cookies
Cookies are small text files stored on your device when you visit a website. They help the site remember information about your visit — like whether you're logged in.
We also use similar technologies such as local storage (for example, your cookie-consent choice) and session tokens that serve the same purpose. This policy covers all of them.
02 · Cookies We Use
Essential Cookies
These are required for the Service to function. They cannot be disabled.
| Cookie | Purpose | Duration |
|---|---|---|
sb-<project-ref>-auth-token |
Supabase authentication — keeps you logged in | Up to 30 days |
sb-<project-ref>-auth-token-code-verifier |
OAuth sign-in flow (e.g. Google) | Session |
The <project-ref> segment is your Supabase project identifier. Exact cookie names may vary slightly by environment.
Analytics Cookies (optional)
When Google Analytics 4 (GA4) or Google Tag Manager (GTM) is enabled and you consent to analytics, Google may set cookies such as:
| Cookie | Purpose | Duration |
|---|---|---|
_ga |
Distinguishes unique visitors for aggregate stats | Up to 13 months |
_ga_<container-id> |
Persists session state for GA4 | Up to 13 months |
_gid |
Distinguishes users within a 24-hour period | 24 hours |
Analytics is loaded with Google Consent Mode v2. Until you accept analytics cookies, only cookieless pings may be sent — no persistent analytics cookies are stored.
We do not run our own custom analytics cookies (such as _analytics_id).
Preference Storage (optional)
| Storage | Purpose | Duration |
|---|---|---|
cookie-consent (local storage) |
Remembers your cookie consent choices | Until cleared or consent version changes |
Account preferences such as dark/light theme are stored in your Supabase profile when signed in — not in a browser cookie.
03 · Cookies We Do Not Use
We do not use:
- Advertising or retargeting cookies.
- Social media tracking pixels (Facebook, Twitter/X, TikTok, etc.).
- Fingerprinting or cross-site behavioral tracking.
- Marketing cookies — the consent banner includes a Marketing category for Google Consent Mode compatibility, but we do not enable ad storage or ad personalization.
04 · Third-Party Cookies
Our infrastructure and security providers may set their own cookies as part of delivering the Service:
Supabase sets authentication tokens (sb-*) to manage your login session securely. Supabase Privacy Policy →
Vercel may set edge-network cookies for performance routing and DDoS protection. These are technical in nature. Vercel Privacy Policy →
Google Analytics / Google Tag Manager (when configured and consented) may set the _ga family of cookies described above. Google Privacy Policy →
Cloudflare Turnstile (when enabled on sign-in, forms, or engagement actions) may use cookies or similar storage to verify that requests come from real users. Invisible Turnstile is subject to the Cloudflare Turnstile Privacy Addendum.
05 · Managing Your Cookie Preferences
Via the consent banner
When PUBLIC_CONSENT_ENABLED is active and analytics is configured, a consent banner on your first visit lets you accept, decline, or customize non-essential cookies. You can reopen settings from the site footer at any time.
Via your browser
All major browsers allow you to view, block, or delete cookies through their settings:
- Chrome — Settings → Privacy and Security → Cookies
- Firefox — Settings → Privacy & Security → Cookies and Site Data
- Safari — Settings → Privacy → Manage Website Data
- Edge — Settings → Cookies and Site Permissions
Note that blocking essential cookies will prevent login and other core features from working correctly.
Via opt-out tools
For Google Analytics, you can opt out globally using the Google Analytics Opt-out Browser Add-on.
06 · Cookie Consent & Legal Basis
For visitors in the European Economic Area (EEA) and United Kingdom, we rely on:
- Legitimate interest for essential cookies — these are strictly necessary to deliver the Service you requested.
- Consent for analytics cookies — we ask before enabling analytics storage and will not set analytics cookies if you decline.
For visitors in California, you have the right to opt out of any sale or sharing of personal information. We do not sell cookie data. See our Privacy Policy for your full CCPA rights.
07 · Changes to This Policy
We may update this Cookie Policy as we add or remove features. When we do, we will revise the updatedAt date at the top of this page. Material changes will be surfaced via the consent banner on your next visit (when the banner is enabled).
08 · Contact
Questions about how we use cookies? Reach us at hello@vibecode.game.
