Cookie Policy

Effective 18 May 2026

A short list of every cookie we use, why we use it, and how to refuse the ones that are not strictly necessary.

1What cookies are.

A cookie is a small text file a website stores in your browser. We also use similar local-storage and session-storage entries; we call all of them “cookies” in this policy. Some cookies are strictly necessary for OBJEKT to function. Others are optional and we only set them with your consent.

2Categories.

We group cookies into four categories:

Strictly necessary

Required to deliver the service you have asked for — for example, keeping you signed in or processing a payment. These are set without consent because, without them, the service does not work.

Functional

Remember your preferences (theme, language). Not essential, but improve your experience. Set with consent.

Analytics

Anonymous usage data that helps us understand which features are used and where the product needs work. Set only with consent.

Marketing

We do not use marketing or advertising cookies on OBJEKT, and we have no plans to.

3The current cookies we set.

This list reflects the current product. We will update it when we add or remove a cookie.

sb-access-token / sb-refresh-token

Keeps you signed in. Set after you authenticate. Without these you cannot use OBJEKT at all.

Session + refresh (rotating)

Strictly necessary

OBJEKT (via Supabase Auth)

objekt_theme

Remembers your light/dark theme preference between visits.

1 year

Functional

OBJEKT

objekt_consent

Stores your cookie-consent choices so we do not ask again on every page load.

1 year

Strictly necessary

OBJEKT

__stripe_mid / __stripe_sid

Fraud prevention on the Stripe checkout and billing portal. Set only when you open a payment flow.

Session – 1 year

Strictly necessary

Stripe

ph_*

Anonymous product analytics — which features are used, where users drop off — so we can make OBJEKT better. Set only after you opt in.

Up to 12 months

Analytics

PostHog (if enabled)

4How to control them.

On your first visit we show a consent banner with three choices: accept all, reject non-essential, or pick by category. You can change your choice at any time from Settings → Privacy.

You can also block or delete cookies in your browser settings. Strictly necessary cookies cannot be disabled inside OBJEKT; if you block them in your browser, parts of the service (in particular, staying signed in and paying) will stop working.

5Do Not Track and Global Privacy Control.

We honour the Global Privacy Control (GPC) signal where the browser sends one. If your browser broadcasts GPC, we treat that as a rejection of analytics and any future opt-in marketing cookies, without requiring you to interact with the banner.

6Questions.

Cookie questions go to privacy@objekt-ai.com. For the broader picture of how we use data, see our Privacy Policy.