1. Cookie Types

Essential: Authentication state, session security, CSRF protection, route handling, checkout return handling, and fraud prevention.
Preferences: Language, theme, and UI settings.
Analytics: Product reliability, page performance, aggregate usage measurement, and error diagnostics.
Security: Abuse detection, bot mitigation, rate limiting, replay prevention, and incident investigation.

2. Third-Party Services

Supabase may use auth/session storage for sign-in flows. Cloudflare may use security cookies for edge protection and bot mitigation. Whop may use cookies or local storage during checkout, membership, and billing portal flows. PostHog may set analytics identifiers only when the production analytics key is configured; autocapture and session recording are disabled in the web client. These providers process data under their own service terms and privacy commitments.

3. Duration and Management

Cookie duration depends on purpose. Session cookies may expire when the browser closes; security and preference cookies may last longer. You can manage cookies in your browser settings. Blocking essential cookies can break login, account security, checkout return, billing, and portal functions.

4. No Trading Decisions from Cookies

Cookies do not place trades, authorize exchange connections, or store raw exchange secrets. Trading and credential workflows require authenticated application actions and separate backend or desktop controls.

5. Contact

For questions about the cookie policy, email [email protected]