/legal/cookie-policy
Cookie policy
Last updated:
gasguide.app uses a small number of cookies. We don't use advertising cookies, tracking pixels, or third-party analytics that profile users across sites. Here's the complete list.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| sb-* (Supabase auth) | Session token + refresh token from Supabase Auth. Required to keep you signed in. | Session + 60 days (refresh) | Strictly necessary |
| gg_ref | First-touch affiliate attribution. Captures ?ref=CODE so the referrer earns commission if you sign up. | 30 days | Functional |
| gasguide:* (localStorage) | UI preferences (Q-bank goal, dashboard layout, dismissed onboarding). Stored in your browser, never sent to our servers. | Persistent (clear browser data to remove) | Functional |
| Cloudflare cf_clearance + __cf_bm | Bot detection + DDoS protection at the CDN layer. Required for site stability. | Session + 30 days | Strictly necessary |
What we don't use
- Google Analytics or any third-party analytics
- Facebook Pixel, TikTok Pixel, or any advertising-network pixels
- Cross-site tracking or behavioral retargeting
- Session replay (Hotjar, FullStory, etc.)
Managing cookies
Most browsers let you block or clear cookies via Settings. Blocking Supabase auth cookies will sign you out — you won't be able to use gated features. The gg_ref cookie can be cleared at any time without affecting your account.
Updates
We'll update this policy if cookie usage changes. The "last updated" date at the top reflects the most recent revision. See also our Privacy Policy.