Legal
Cookie notice
Every cookie we set today is strictly necessary — the product does not work without it. We run no advertising or tracking cookies.
- Version
- 0.1-draft
- In effect from
- —
Draft — not yet in force. This text has not been reviewed by a lawyer and is published for transparency during the invite-only beta, not as a binding agreement. The following still have to be supplied before it can take effect: registered company name, company registration number, registered office address, governing law, jurisdiction for disputes, data-protection contact address, EU representative (where required). The operative terms during the beta are the ones issued on request — ask us.
1.What we set
| Cookie | What it does | Lasts |
|---|---|---|
| Supabase auth session | Keeps you signed in and lets the server verify who you are on each request. | Session and refresh lifetime |
| active_org | Remembers which workspace you were last working in, so a reload does not drop you somewhere else. | Persistent until changed |
| Canva OAuth state | A short-lived token that proves an in-progress Canva connection started here, blocking a forged callback. | Minutes |
| cookie_consent | Records your answer to the banner, so you are not asked on every visit. | 180 days |
2.What we do not set
No advertising cookies, no cross-site trackers, no third-party marketing pixels, and no profiling for advertising. We do not sell data to anyone.
There is no analytics cookie today either. The consent banner exists ahead of that — if non-essential cookies are ever added, they will only be set after you allow them, and this notice will list them before they appear.
3.Why the necessary ones need no permission
Cookies strictly necessary to deliver a service the user asked for do not require consent under EU cookie rules. Each cookie above is in that category: without the auth pair you cannot stay signed in, without the OAuth state token an integration handshake cannot be verified as genuine, and the consent cookie exists only to record your own choice.
4.Changing your choice
You can revisit the banner at any time: . You can also clear cookies in your browser — signing you out, and asking again on your next visit.
Blocking strictly necessary cookies in your browser will stop the product working. That is a limitation of what the cookies do, not a choice we are making.
5.More detail
How the underlying data is handled is in the privacy policy.
Questions about this document go to our contact form. To exercise a data-protection right, use the data request form.