Cookie Policy
We use cookies to keep you signed in and to understand how UnderDraft is used. Here's exactly what we set and why.
Overview
What are cookies?
Cookies are small text files that a website stores on your browser when you visit. They serve a variety of purposes — from keeping you signed in between sessions to helping us understand which features are most useful.
UnderDraft uses a minimal set of cookies. We do not use cookies for advertising or to build marketing profiles. Below you will find a full breakdown of every cookie category we use, what it stores, and how long it lasts.
Categories
Cookies we use
Essential cookies
Required for the platform to function. Cannot be disabled.
| Cookie | Purpose | Duration |
|---|---|---|
| sb-access-token | Stores your Supabase authentication session so you remain signed in across page loads. | Session |
| sb-refresh-token | Used to silently renew your access token without requiring you to sign in again. | 60 days |
| __session | Server-side session identifier used for secure request validation. | Session |
Preference cookies
Remember your settings and personalisation choices.
| Cookie | Purpose | Duration |
|---|---|---|
| ud_theme | Stores your light/dark mode preference so it persists between visits. | 1 year |
| ud_onboarding | Tracks which onboarding steps you have completed to avoid repeating them. | 30 days |
Analytics cookies
Help us understand how the platform is used so we can improve it.
| Cookie | Purpose | Duration |
|---|---|---|
| _posthog | PostHog session identifier for anonymous product analytics (page views, feature usage). | 1 year |
| ph_distinct_id | Anonymous identifier used by PostHog to count unique visitors without storing personal data. | 1 year |
Third parties
Third-party services
Some cookies are set by third-party services we rely on. These services have their own privacy policies and cookie practices.
Supabase
Authentication and database provider. Sets session cookies required for sign-in.
PostHog
Self-hosted product analytics. Anonymous usage data only. No cross-site tracking.
Your choices
Managing your cookies
You can control and delete cookies through your browser settings at any time. Note that disabling essential cookies will prevent core features — such as staying signed in — from working correctly.
Still have questions?
Read our full Privacy Policy or reach out to our team for any cookie-related questions.