Cookie Policy

We set the cookies that keep you signed in, plus one that remembers day or night mode once you pick it, and nothing else. No advertising cookies, no cross-site trackers, no profiling, no data sold to anyone. If that ever changes, this page changes first and you will be asked before any non-essential cookie is set.

These make the site work. Under the ePrivacy Directive they do not require consent, because without them you could not log in at all.

• Session cookies (Supabase Auth). Hold your signed-in session and refresh it while you browse. Set when you log in, cleared when you sign out. Without them every page would ask you to log in again.
• Your cookie choice. We remember that you have seen this notice in your browser's local storage, so we don't ask again on every page.
• Day or night (wo-theme). Set only when you press the day/night button in the web-app, so the next page opens in the mode you chose. It holds one word, light or dark, and lasts a year. Until you press it, the web-app follows your device's setting and sets nothing.

Card details never reach our servers. Checkout and the billing portal are hosted by Stripe, and any cookie they need for fraud prevention is set on Stripe's own domain, under Stripe's policy, while you are on their page.

We measure which pages get used with Vercel Web Analytics, and it still sets no cookies. It stores nothing in your browser: visitors are counted from a hash of the request itself, which is discarded after 24 hours. Nothing follows you to another site, and nothing is tied to your account.

Consent exists to protect what is stored on your device. We store your session, which is what being signed in means, and nothing else, so there is nothing here to accept or refuse. The day we run something that does write to your device, this notice becomes a real choice with a real refusal, and it will say so.

Signing out clears your session. Beyond that, every browser can delete cookies and site data for a single site, usually under Settings → Privacy. Deleting them signs you out; nothing else is lost.

Write to business@whaleorbit.com and a human will answer.