1. What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They help websites remember information about your visit, such as your preferred language or whether you are logged in, making your next visit easier and the site more useful to you.

We also use similar technologies such as localStorage (browser storage) to persist preferences on your device without a network round-trip.

2. Categories of Cookies We Use

Strictly Necessary

Always active · cannot be disabled

These cookies are essential for the Service to function. They enable secure authentication, maintain your session while logged in, and prevent cross-site request forgery. Without them, features like logging in or uploading files cannot work.

Analytics

Requires consent (opt-in)

We plan to use Plausible Analytics, a privacy-first, cookie-free analytics tool hosted in the EU. Plausible does not use cookies, does not fingerprint users, and does not collect personal data. No consent banner is required under GDPR or ePrivacy rules. This page will be updated when analytics is activated.

Functional / Preferences

Used to remember your settings

Stored in localStorage (not transmitted to our servers). Used to remember your theme (dark/light) and consent choices so you don't have to re-enter them on every visit.

3. Cookie & Storage Inventory

Name	Type	Purpose	Duration	Category
sb-*-auth-token	Cookie	Supabase authentication session token	Session / 1 week	Strictly Necessary
sb-*-auth-token-code-verifier	Cookie	PKCE OAuth flow security code verifier	Session	Strictly Necessary
cookie_consent	localStorage	Records your cookie consent choice and date	1 year	Functional
theme	localStorage	Dark / light mode preference	Persistent	Functional

We do not use advertising, retargeting, or third-party tracking cookies.

4. Third-Party Cookies

Sandra does not embed third-party advertising scripts, social media pixels (Facebook Pixel, Google Ads, etc.), or cross-site tracking technologies.

Our payment processor, Stripe, may set cookies when you interact with the checkout widget. Stripe's use of cookies is governed by Stripe's Privacy Policy .

5. Managing & Deleting Cookies

In-app consent: You can review and update your consent preferences at any time via the cookie banner or from your account settings.

Browser controls: Most browsers allow you to refuse, delete, or restrict cookies through their settings:

Please note that disabling strictly necessary cookies will prevent core features such as login from working.

6. Legal Basis (GDPR / ePrivacy)

Strictly necessary cookies are deployed on the legal basis of legitimate interest (Art. 6(1)(f) GDPR) and are exempt from consent under Recital 25 of the ePrivacy Directive (2002/58/EC) because they are essential to a service explicitly requested by you.

Functional cookies (localStorage) do not involve transmission of personal data to external parties and are exempt from consent under the ePrivacy Directive.

We do not deploy analytics cookies that require consent. If we do so in the future, we will seek your explicit opt-in first.

7. Changes to This Policy

We may update this Cookie Policy from time to time. When we do, we will revise the "Last updated" date above and, where the changes are material, notify you via the consent banner or by email.

8. Contact

Questions about cookies?

contact@sandrafiles.io