Cookie Disclosure
This page explains the cookies and the main persistent browser-storage entries that RepRoute uses. We treat browser localStorage entries the same as cookies for transparency. We also keep a small number of functional localStorageentries (for example to remember which onboarding steps and one-time notices you have already seen); these are strictly functional, stay on your device, and are never used for tracking.
Why You Will Not See a Cookie Banner
RepRoute uses only strictly necessary cookies and local-storage entries. We do not run any advertising, analytics, or third-party tracking scripts that would require an opt-in. Under the ePrivacy Directive and PDPA guidance, strictly necessary technologies do not require consent, so we have chosen not to display a banner that offers no meaningful choice. This page exists so that you can review what we set and decide for yourself.
Cookies and Storage We Set
| Name | Purpose | Duration | Type |
|---|---|---|---|
sb-<project-ref>-auth-token | Supabase authentication session. Required to keep you signed in between page loads. | 1 year (rotating refresh) | Essential cookie |
sb-<project-ref>-auth-token-code-verifier | One-time PKCE verifier used during the OAuth sign-in handshake. | ~5 minutes | Essential cookie |
app-design (localStorage) | Stores your visual-design preference (e.g. classic mode) so the app renders consistently before hydration. | Until you clear it | Essential |
theme (localStorage) | Stores your dark / light mode choice so the correct theme is applied on first paint. | Until you clear it | Essential |
NEXT_LOCALE | Remembers the display language you pick in Settings so the app renders in your chosen language on every request. | 1 year | Essential cookie |
Third-party Cookies
We embed Cloudflare Turnstile on our sign-up and sign-in pages to block automated abuse. When Turnstile decides a bot challenge is necessary, Cloudflare may set a short-lived cookie on their own domain to record the challenge result. We do not control these cookies. You can review Cloudflare's practices in the Cloudflare Privacy Policy.
We do not embed Google Analytics, Meta Pixel, TikTok Pixel, advertising tags, session-recording tools, or any other third-party tracker.
How to Disable Cookies
You can block or delete cookies and local-storage entries through your browser settings. Note that disabling the Supabase session cookie will make it impossible to remain signed in, and disabling app-design or theme will cause a brief flash of the default theme on each page load. Browser-specific instructions:
Changes to This Disclosure
If we ever introduce non-essential cookies (for example analytics or marketing), we will update this disclosure, present a consent banner before any such cookie is set, and require your opt-in.