Last updated: June 27, 2026 · Effective: June 27, 2026
1. What Are Cookies?
Cookies are small text files stored on your device by your web browser. They help websites remember information about your visit, such as login status and preferences.
Similar Technologies We Use:
- Local Storage: Stores data locally in your browser (larger capacity than cookies)
- Local Database: Browser-based storage for offline data sync
- Session Storage: Temporary storage cleared when you close the browser
For simplicity, we refer to all of these as "cookies" in this policy.
2. How We Use Cookies
Exporb uses cookies and similar technologies for three main purposes:
Essential (Strictly Necessary)
Required for the app to function. You cannot opt out of these.
- Authentication (keeping you logged in)
- Security tokens (preventing unauthorized access)
- Offline data sync (local browser cache)
Functional
Remember your preferences to improve your experience.
- Dark mode preference
- Language selection
- UI settings (sidebar collapsed, etc.)
Analytics
Help us understand how you use the app and fix bugs.
- Error tracking and performance monitoring
- Product analytics — page views, feature usage, session duration
3. Cookies & Storage We Use
| Name | Type | Purpose | Duration |
|---|---|---|---|
| *-auth-token | Essential | Authentication token (keeps you logged in) | Session |
| exporb-offline-* | Essential | Local browser cache for offline data sync | Persistent |
| theme | Functional | Remembers dark mode preference | 1 year |
| user-preferences | Functional | UI settings (sidebar state, language, etc.) | Persistent |
| error-tracking-* | Analytics | Error tracking and performance monitoring | Session |
| ph_* | Analytics | Product analytics (page views, clicks, feature usage) | 1 year |
| exporb_consent | Essential | Stores your cookie consent preferences | 1 year |
Privacy Protection
Error Tracking Privacy (Sentry): We have configured Sentry with the highest privacy protections:
- Automated PII scrubbing removes email addresses, phone numbers, and IP addresses
- Session replay is disabled
- PostHog session replay is disabled; autocapture and heatmaps are disabled
- A pseudonymized user ID is used — your email address is not shared with analytics providers
4. Third-Party Cookies
We use third-party services that may set their own cookies:
Supabase (Authentication & Database)
Supabase sets authentication cookies and tokens to manage your login session securely. Data processed in the European Union.
Sentry (Error Tracking)
Sentry sets cookies to help us fix bugs. Session replay is disabled. Requires analytics consent. Data processed in the European Union.
PostHog (Product Analytics)
PostHog sets cookies for product analytics and feature usage tracking. Session replay is disabled. Autocapture and heatmaps are disabled. Requires analytics consent. Data processed in the European Union.
Stripe (Payments)
Stripe sets cookies when you access the payment or subscription management pages. Required for secure payment processing.
Vercel (Hosting & CDN)
Vercel may set performance cookies for content delivery optimization. Serverless functions run in the European Union; the CDN edge is global.
Cloudflare (Security & Analytics)
Cloudflare provides DDoS protection, content delivery, and privacy-focused web analytics (Cloudflare Insights). Cloudflare Insights does not use cookies or collect personal data — analytics are aggregated from edge server logs and do not track individual users across sites. Cloudflare may set a __cf_bm bot-detection cookie for security; this is an essential cookie required to protect the service from automated attacks.
Note: We do not control third-party cookies. Please review their privacy policies for details.
5. Managing Your Cookie Preferences
Browser Settings
You can control cookies through your browser settings. Most browsers allow you to:
- Block all cookies
- Block third-party cookies only
- Delete cookies after closing the browser
- View and delete individual cookies
Warning: If you block essential cookies (authentication, offline sync), Exporb will not function properly. You may not be able to log in or use the app offline.
Browser-Specific Instructions
Opt-Out Information
Error Tracking
You can opt out of analytics cookies (including error tracking and product analytics) from your Privacy Settings page in the app, or by declining analytics cookies in the cookie consent banner. Essential cookies cannot be disabled as they are required for the app to function.
ePrivacy Directive / GDPR consent timing: No non-essential cookies (analytics, error tracking) are set or activated until you have given explicit consent via the cookie banner. Until you accept, only strictly necessary cookies — required for authentication, offline data sync, and your preferences — are loaded. You can change or withdraw your consent at any time from the Privacy Settings page in the app.
6. Cookie Data Retention
Session Cookies
Deleted automatically when you close your browser.
Persistent Cookies
Remain for up to 1 year or until you manually delete them.
Local Database (Offline Cache)
Cleared automatically when you sign out. Also cleared when you delete your account.
Analytics Data
Error tracking data is retained for 90 days. Product analytics data is retained for 12 months. Both are automatically deleted after their retention period.
7. Updates to This Policy
We may update this Cookie Policy to reflect changes in our use of cookies or legal requirements. When we do:
- We will update the "Last updated" date at the top
- For material changes, we will notify you via email or in-app notification
- Continued use of Exporb after changes constitutes acceptance
8. Contact Us
Questions about our use of cookies? Contact us:
Mailing Address
Aeon Kosmos, LLC
9169 W State St, Ste 3694
Garden City, ID 83714, USA