Cookies Policy

What cookies are

Cookies are small text files a website stores in your browser to remember things between visits — like keeping you signed in, remembering your preferences, or counting how many people saw a page. Some cookies are set by the website itself (“first party”); others by third-party services embedded in the site.

What Qolab currently uses

Essential cookies only — and we mean it

As of this policy version, Qolab uses only strictly essential cookies. No Vercel Analytics, no Google Analytics, no PostHog, no advertising pixels, no cross-site trackers, no fingerprinting. The informational banner on the site reflects this reality — it's not a dark-pattern consent wall.

We commit: if we ever enable any non-essential cookie (analytics, retargeting, heatmaps), we will first introduce a proper opt-in consent banner, update this page, and email all active users 30 days before the change takes effect. No analytics cookie will ever be set before you've affirmatively consented.

Session cookie: Set by Supabase Auth. Keeps you signed in across page reloads. Expires 30 days after last activity, or immediately on logout. First-party. Necessary — you cannot use an authenticated Qolab account without it.
Refresh cookie: Set by Supabase Auth. Allows us to refresh your session silently without asking you to log in every hour. First-party. Necessary.
Consent cookie (future): Will be introduced when we enable optional analytics. Records your consent choices so we remember them next visit. First-party. Not active today.

What we explicitly do NOT use

Third-party advertising cookies— we don't run Facebook Pixel, Google Ads tags, LinkedIn Insights, or similar ad trackers on the site.
Cross-site tracking— we don't embed pixels, widgets, or iframes that track you across the web.
Device fingerprinting— we don't identify you by combining browser, screen, and system characteristics.
Session replay / heatmaps— we don't record your clicks, scrolls, or keystrokes.

If we ever add analytics (e.g., Vercel Analytics, PostHog), we'll update this page and introduce an opt-in cookie consent banner before any non-essential cookie is set.

Controlling cookies in your browser

Most browsers let you view, block, or delete cookies. Note that blocking Qolab's essential session cookies will break sign-in — you'll be logged out on every page.

Chrome · Settings → Privacy and security → Cookies and other site data
Firefox · Settings → Privacy & Security → Cookies and Site Data
Safari · Safari → Settings → Privacy
Edge · Settings → Cookies and site permissions

Questions?

Email hello@qolab.in with “Cookies policy question” in the subject.