Cookie Policy
Our cookie policy and how we use them
Last updated: February 26, 2026
1. What Are Cookies?
In Short
Cookies are small text files that a website stores on your device when you visit. They allow the site to remember information about your visit — such as whether you're logged in — so you don't have to re-enter it every time.
In addition to HTTP cookies, web browsers also provide localStorage — a way to store data on your device that persists between sessions but is never sent to the server as part of a network request. This page covers both HTTP cookies and browser localStorage items that CalendarPipe uses.
2. Cookies & Storage We Use
In Short
CalendarPipe uses a minimal set of cookies and browser storage — only what is necessary to keep the service working and to remember your preferences.
| Cookie / Storage | Purpose | Duration | Type |
|---|---|---|---|
sb-[ref]-auth-token | Authenticates your session with CalendarPipe. Set and managed automatically by Supabase. The exact cookie name includes your project reference ID. | Session (JWT-based) | Essential |
csrfSecret | Protects form submissions from cross-site request forgery (CSRF) attacks. | Session | Essential |
theme(localStorage) | Stored in browser localStorage, not sent as an HTTP cookie. Used only client-side to remember your light or dark mode preference. | Persistent (no expiry) | Preference |
ph_<token>_posthog(localStorage) | Stores anonymous analytics identifiers and session data for PostHog product analytics. Used to understand how CalendarPipe is used and improve the service. Only created after you accept analytics cookies — never sent as an HTTP cookie. | Persistent (no expiry) | Analytics |
Supabase automatically manages session cookies for authentication. The exact cookie name includes your project reference ID (e.g., sb-[ref]-auth-token).
3. Analytics
In Short
CalendarPipe uses PostHog for product analytics to understand which features are used and where users encounter friction. What we collect depends on your choice in the cookie banner:
- Before you choose (or if you dismiss the banner): we record anonymous page visits without writing any cookie or localStorage item. Nothing that identifies your device is stored in your browser, and visits cannot be linked back to you across days.
- If you accept: PostHog stores a single localStorage item (
ph_<token>_posthog) containing an anonymous identifier and session metadata, so repeat visits can be recognised. This is NOT an HTTP cookie — it is never sent to the server with network requests. - If you decline: no analytics data is collected at all, and nothing is stored on your device.
- We do not use advertising or behavioural tracking cookies.
- We do not sell or share analytics data with third parties.
- Analytics data is processed by PostHog in the United States, under the EU-U.S. Data Privacy Framework and Standard Contractual Clauses.
4. Managing Cookies
In Short
You can manage and delete cookies through your browser settings. Most browsers allow you to:
- View which cookies are stored and delete them individually
- Block cookies from specific sites or block all third-party cookies
- Clear all cookies and site data in one step (usually found under Privacy or History settings)
Essential cookies (authentication and CSRF protection) are required for CalendarPipe to function. Clearing or blocking them will sign you out and prevent you from signing back in until a new session cookie is set.
To clear your theme preference, open your browser's developer tools, navigate to Application → Local Storage, and delete the theme key. Doing so will reset your preference to your system's default light or dark mode setting.
To clear analytics data, open your browser's developer tools, navigate to Application → Local Storage, and delete any keys starting with ph_. This will reset your anonymous analytics identifier. CalendarPipe will continue to function normally.
To change your analytics choice, delete the cookie_consent_status key from Local Storage in the same panel. The cookie banner will appear again on your next visit so you can accept or decline.
5. Contact
If you have questions about this Cookie Policy, contact us at:
CalendarPipe
privacy@calendarpipe.com