Cookie Policy
We use cookies to keep you signed in and to understand how UnderDraft is used. Here's exactly what we set and why.
Overview
What are cookies?
Cookies are small text files that a website stores on your browser when you visit. They serve a variety of purposes — from keeping you signed in between sessions to helping us understand which features are most useful.
UnderDraft uses a minimal set of cookies. We do not use cookies for advertising or to build marketing profiles. Below you will find a full breakdown of every cookie category we use, what it stores, and how long it lasts.
Categories
Cookies we use
Essential cookies
Required for the platform to function. Cannot be disabled.
| Cookie | Purpose | Duration |
|---|---|---|
| sb-access-token | Stores your Supabase authentication session so you remain signed in across page loads. | Session |
| sb-refresh-token | Used to silently renew your access token without requiring you to sign in again. | 60 days |
| __session | Server-side session identifier used for secure request validation. | Session |
Preference cookies
Remember your settings and personalisation choices.
| Cookie | Purpose | Duration |
|---|---|---|
| ud_theme | Stores your light/dark mode preference so it persists between visits. | 1 year |
| ud_onboarding | Tracks which onboarding steps you have completed to avoid repeating them. | 30 days |
Analytics cookies
Help us understand how the platform is used so we can improve it.
| Cookie | Purpose | Duration |
|---|---|---|
| gamebreak_session_id | First-party session identifier for our own analytics (page views, feature usage). Stored in your browser session storage and cleared when you close the tab. No third-party analytics providers are used. | Session |
| gamebreak_tracking_enabled | Remembers whether you have opted out of first-party analytics. Stored in local storage. | Until you clear it |
Third parties
Third-party services
Some cookies are set by third-party services we rely on. These services have their own privacy policies and cookie practices.
Supabase
Authentication and database provider. Sets session cookies required for sign-in.
Your choices
Managing your cookies
You can control and delete cookies through your browser settings at any time. Note that disabling essential cookies will prevent core features — such as staying signed in — from working correctly.
Still have questions?
Read our full Privacy Policy or reach out to our team for any cookie-related questions.