Cookie statement
Cookies on iriska.ai
The product sets two cookies of its own, both needed to work, and no analytics or advertising cookie. Listed from the code.
DRAFT — not reviewed by counsel
This text was drafted from what the product's code does and has not been reviewed by a lawyer. Every bracketed gap is a fact only the company or counsel can supply; nothing here has been invented to fill it.
The product's own cookies
| Name | Purpose | Set by | Lifetime |
|---|---|---|---|
| sb-[project]-auth-token (and .0, .1 when split) | Keeps you signed in. Set after you enter the code; carries the session for every iriska.ai host; cleared when you sign out. | The sign-in service (Supabase), through the product's proxy; Domain .iriska.ai; Secure; SameSite Lax. | Up to 400 days (the browser's ceiling), refreshed while you use the product; cleared on sign-out. |
| NEXT_LOCALE | Remembers the language you chose when it differs from your browser's preference. | The product's routing (next-intl); SameSite Lax. | The browser session. |
Third parties
- Cloudflare Turnstile — a challenge on the sign-in form, when configured, to keep bots from the code; Cloudflare may set cookies of its own on its domain for that purpose.
- The marketplace — a link away, on its own host, with its own statement; the sign-in cookie above is shared with it by design.
What is not set
No analytics, no advertising, no tracking cookie, no third-party script on the product's pages other than the challenge on the sign-in form. Browser storage is not used for tracking.
Your choices
Both cookies are necessary for the product to work and need no consent; blocking the sign-in cookie means you cannot stay signed in. Version [to be completed: the date of this version].