Legal
Cookies & local storage
We use as little of this as we can get away with. Here is the complete list — the cookies that keep you signed in, the browser storage that remembers your preferences, and the one optional category you can turn down.
Last updated
1. Strictly necessary
These make the app work. Without them you cannot stay signed in, so they are set without asking — the law allows this, and we would have nothing to offer you if we didn’t.
| Name | Purpose | Kind & lifetime |
|---|---|---|
sb-*-auth-token | Keeps you signed in and refreshes your session as you move between pages. Set by our authentication provider, Supabase. | First-party cookie, up to 1 year (refreshed on use) |
sb-*-auth-token-code-verifier | Short-lived value that secures the sign-in and email-confirmation exchange. | First-party cookie, deleted once you are signed in |
2. Preferences (browser storage, not cookies)
These never leave your device and are never sent to our servers. They live in your browser’s local storage, so clearing site data removes them.
| Key | Purpose | Kind & lifetime |
|---|---|---|
donjon-theme | Remembers whether you chose light, dark or system appearance, and applies it before the page paints so it does not flash. | Local storage, until you clear it |
donjon-active-cat-* | Remembers which cat you were last looking at in each household. | Local storage, until you clear it |
3. Analytics — optional
We use PostHog (EU-hosted) to understand which features people actually use and to catch errors before they become support emails. It is set only if you consent, and you can change your mind at any time.
| Name | Purpose | Kind & lifetime |
|---|---|---|
ph_*_posthog | Distinguishes one visitor from another so we can count sessions and follow a flow through the app, and attaches crash reports to the right session. | First-party cookie, up to 1 year |
We do not run advertising cookies, we do not use tracking pixels, and we do not share this data with ad networks or data brokers. There is nothing here from Google, Meta or any similar network.
4. How to control cookies
- Analytics— decline it when we ask, or withdraw consent later by clearing this site’s data in your browser. Declining changes nothing about how the app works.
- Everything — every browser can block or delete cookies for a site, usually under Settings → Privacy. Blocking the strictly necessary cookies will sign you out and prevent you from signing back in.
- Do Not Track— we honour a browser “do not track” signal by treating it as a refusal of analytics.
5. Third parties on our pages
When you go through checkout you are handed over to Stripe, which sets its own cookies on its own pages to process the payment and prevent fraud. That is covered by Stripe’s privacy policy. Fonts and images are served from our own domains, so no third party sees your visit to Catify itself.
6. Changes
If we add or remove anything, this page changes with it and the date at the top updates. For the wider picture of what we do with personal data, see the Privacy Policy, or ask us at privacy@getcatify.app.