Cookie Policy

Cookies are small text files that a website stores on your device. They let the site remember you between requests — that's how signed-in sessions work. We also use a small number of similar technologies (localStorage, sessionStorage) for the same purpose.

We group cookies into four categories. Only the first two apply by default; the rest are off until you opt in.

Strictly necessary

Required for the Service to function. You cannot opt out without breaking sign-in.

• sb-…-auth-token, sb-…-refresh-token — Supabase Auth session cookies, set on sign-in and refreshed on navigation. Required for everything behind a login.
• CSRF and security tokens — protect form posts and server actions from cross-site forgery.

Functional

Remember UI preferences that affect how the Service looks (theme, sidebar open/closed). Set on use; cleared when you sign out or clear browser data.

Analytics

We use PostHog to understand how the Service is used in aggregate — which pages are visited, where users get stuck, whether a new feature is being adopted. PostHog stores a pseudonymous identifier in your browser; it is not linked to your name unless you sign in. You can opt out below.

Marketing

We do not set marketing or advertising cookies at this time. If that changes, we will update this page and ask for your consent first.

Some pages of the Service load resources from third parties. When they do, those third parties may set their own cookies on your device. The notable ones are:

• LiveKit — during a voice assessment, connects your browser to the audio infrastructure. No identifying cookies; WebRTC session state only.
• Supabase — authentication and database, see above.
• PostHog — analytics, opt-out available below.

You can manage cookies in three places:

• Your browser settings — clear cookies for this site at any time, or block them site-wide. Clearing the Supabase session cookies signs you out.
• Your operating system — system-level do-not-track and tracker-prevention features (e.g. Safari ITP, Firefox Enhanced Tracking Protection) work as expected on the Service.
• Your profile privacy page — opt out of analytics cookies specifically from the profile privacy page when signed in.

We may update this Cookie Policy from time to time. The version number and last-updated date at the top of this page are the canonical record. Material changes will be notified to signed-in users.