Cookie Policy
Last updated: April 27, 2026
1. What are cookies?
Cookies are small text files stored on your device when you visit a website. We also use comparable browser-storage technologies (localStorage) for the same purposes. This policy treats them together as “cookies”.
2. How we use cookies
We split cookies into two categories: strictly necessary and analytics. Strictly necessary cookies are set without consent because the site cannot function without them. Analytics cookies are only set after you click Accept on the banner.
3. Strictly necessary cookies
These keep you signed in and remember short-lived flow state. They cannot be turned off without breaking core functionality.
| Name | Purpose | Duration |
|---|---|---|
| sb-*-auth-token | Supabase authentication session | Session / 7 days |
| referral_code | Tracks which user referred you so we can credit them on signup | 30 days |
| signup_ref | Remembers if you arrived via the MCP landing page so the signup flow shows the right tier | 30 minutes |
| cookie_consent | Stored in localStorage. Records your accept/reject choice so we don’t ask again. | Until cleared |
4. Analytics cookies (consent required)
We use these to understand which pages and features are actually used so we can improve the product. They are only set after you accept on the banner.
| Provider | Purpose | Duration |
|---|---|---|
| PostHog | Product analytics (page views, feature usage, funnels) | Up to 12 months |
| Google Analytics (gtag) | Aggregate site analytics | Up to 24 months |
5. Managing your preferences
You can change your choice at any time. Rejecting analytics cookies stops PostHog and Google Analytics from being loaded on future page views.
You can also block or delete cookies through your browser settings. Note that blocking strictly necessary cookies will sign you out and prevent the site from working.
6. Contact
Questions about this policy? Email privacy@athletedata.health.