Cookie Policy

What we use today

Supabase authentication / session cookie (strictly necessary) — keeps you signed in across page loads; without it you could not use your account. Set on our domain; expires with your session or when you sign out.

Security tokens (strictly necessary) — protect against cross-site request forgery and keep requests authenticated.

Sidebar layout preference (functional, first-party) — a small value stored in your browser's localStorage to remember whether you prefer the compact sidebar. It never leaves your device and is not used to track you.

Stripe cookies (third-party, payment) — when you upgrade, Stripe Checkout opens on Stripe's own domain and sets cookies for payment and fraud prevention under Stripe's privacy policy. These are necessary to take a payment.

Product analytics (optional — only with your consent)

You control analytics from the cookie banner and can change your choice anytime via the "Cookie settings" link in the footer. Microsoft Clarity loads only after you accept — it sets first-party cookies (for example _clck and _clsk) and records anonymized usage (heatmaps and session replays in which typed text and sensitive fields are masked). Google Analytics 4 uses Google Consent Mode: it runs in a cookieless state by default (anonymized measurement, no analytics cookies) and sets its cookies (for example _ga and _ga_*) only after you accept; rejecting keeps it cookieless. Both help us see where the product is confusing and improve it. They are provided by Microsoft and Google respectively, which may process this data in the United States under Standard Contractual Clauses and/or the EU-US Data Privacy Framework.

Advertising (optional — a separate choice, off unless you turn it on)

Oppye advertises on Google, and this category is how we tell whether those ads work. When you accept it, Google Consent Mode grants three advertising signals — ad_storage, ad_user_data and ad_personalization — which let Google set advertising cookies (for example _gcl_*) and connect an ad click to what happened afterwards, such as creating an account or subscribing. It is switched OFF by default and is a completely separate switch from product analytics: accepting analytics does not accept advertising, and you can accept one and refuse the other under "Choose" in the banner. If you previously accepted analytics before this category existed, we ask you again rather than assuming. Rejecting it changes nothing about how the product works. The data is processed by Google, which may process it in the United States under Standard Contractual Clauses and/or the EU-US Data Privacy Framework.

What we do NOT use

No social-media trackers, no data brokers, and no cookies that build a profile of you for anyone other than measuring our own Google Ads campaigns. We do not sell your data. Apart from the two optional categories above, everything we use is strictly necessary or a first-party functional preference.

Your choice

Both optional categories stay off until you accept them — rejecting is exactly as easy as accepting (one tap, same-size button), and the site works fully either way. Use "Choose" in the banner to accept one category and refuse the other. You can review or change your decision at any time through the "Cookie settings" link in the footer. If we ever add a further non-essential purpose, we will ask for your consent again and update this policy first, rather than reading an older acceptance as covering it.

Managing cookies

You can delete or block cookies in your browser settings at any time. Blocking the strictly-necessary cookies above will stop you from signing in or completing a payment, so the app will not work properly without them.

Contact

Questions about cookies? Email support@oppye.com. See also our Privacy Policy for how we handle personal data more broadly.