Cookie & Local Storage Policy

Effective date: 19 August 2025

This policy explains how [Company legal name] (“SheetPilot”, “we”, “us”) uses cookies and similar technologies on sheetpilot.app and client portals at *.sheetpilot.app.

What are cookies and similar tech?

Cookies are small files stored on your device. We also use Local Storage and similar technologies to keep your session and preferences.

How we categorize them

Essential – required for core functionality (login, security, payments).
Functional – remember preferences and improve experience.
Analytics – help us understand usage (only if enabled).
Advertising – not used.

Cookies & Local Storage We Use

Name / Key	Provider	Purpose	Category	Retention	Type
`nf_jwt`	Netlify	Identity/session for protected areas (if Netlify Identity is enabled).	Essential	Session or up to 30 days	Cookie
`__stripe_mid`	Stripe	Fraud prevention and payment session context.	Essential	~1 year	Cookie
`__stripe_sid`	Stripe	Fraud prevention and payment session context.	Essential	~30 minutes	Cookie
`m`	Stripe	Fraud prevention on Stripe Checkout.	Essential	~2 years	Cookie
`sb-*-auth-token`	Supabase	Authentication token for user session.	Essential	Until logout / expiry	Local Storage
`sb-*-refresh-token`	Supabase	Keeps you signed in (refresh token).	Essential	Until logout / expiry	Local Storage
`sp_consent`	SheetPilot	Stores your cookie preferences.	Essential	6–12 months	Cookie
`sp:theme`	SheetPilot	Remember UI theme and display settings.	Functional	Until cleared	Local Storage
`analytics_*`	SheetPilot / vendor	Anonymous/aggregated usage analytics (only if enabled).	Analytics	3–13 months	Cookie / Local Storage

Third-party cookies

Payments use Stripe, which may set cookies during checkout. Hosting and delivery use Netlify. Authentication and app data use Supabase. SMS/WhatsApp via Twilio does not set cookies on our site.

Your choices

– opens the on-site preferences dialog.
Browser controls: block or delete cookies in your browser settings (may impact essential features).

Do Not Track

We do not change our practices in response to DNT signals; use the preferences dialog and browser controls instead.

Updates

We may update this policy as our use of cookies changes. We’ll post the latest version here with a new effective date.

Contact

Questions: privacy@sheetpilot.app.