SustBridge — Cookie Policy
1. What are cookies?
Cookies are small text files that websites place on your device to remember information about your visit. They make websites work better — for example, by keeping you logged in between visits, remembering your preferences, and helping us understand how the Service is used.
We use cookies and similar technologies (collectively, "cookies") on the SustBridge platform.
2. Types of cookies we use
We classify cookies into the following categories:
2.1 Strictly necessary cookies
These cookies are essential for the Service to function and cannot be switched off. They are typically set in response to actions you take, such as logging in, filling forms, or setting your privacy preferences.
Lawful basis: Strictly necessary for the provision of the Service. No consent required under ePrivacy rules.
Examples: authentication tokens, session cookies, security cookies preventing CSRF attacks.
2.2 Functional cookies
These cookies enable enhanced functionality and personalization, such as remembering your language preference, dark/light mode, or recently viewed content.
Lawful basis: Consent (where they are not strictly necessary) or legitimate interest depending on the specific cookie.
Examples: UI preference cookies, language selection cookies.
2.3 Analytics cookies
These cookies help us understand how the Service is used so we can improve it. They typically collect aggregated, anonymized information.
Lawful basis: Consent.
Examples: cookies that count visits and traffic sources, identify which pages are most popular, and understand how users navigate the platform.
2.4 Marketing cookies
We do not currently use marketing cookies. If we begin using them, we will update this Policy and request consent.
3. Specific cookies in use
The following table lists the cookies we currently set. This list is updated as the Service evolves:
| Cookie name | Category | Purpose | Duration |
|---|---|---|---|
sb-access-token | Strictly necessary | Authenticates your session | Session / configurable |
sb-refresh-token | Strictly necessary | Maintains your authenticated session across page loads | Per Supabase configuration |
sb-cookie-consent | Strictly necessary | Records your cookie consent choices | 12 months |
sb-ui-preferences | Functional | Remembers your UI preferences (e.g., theme, language) | 12 months |
Third-party cookies set by our subprocessors (such as Stripe for fraud detection during checkout) are governed by their own privacy and cookie policies. See section 5 below.
4. How to manage cookies
4.1 Through our cookie banner
When you first visit the Service, a cookie consent banner allows you to:
- Accept all cookies;
- Reject all non-essential cookies;
- Customize your preferences by category.
You can change your cookie preferences at any time via [Cookie Preferences link to be added in footer].
4.2 Through your browser
Most browsers allow you to block or delete cookies through browser settings. Note that blocking strictly necessary cookies may prevent the Service from working correctly. Information on browser cookie settings is available at:
4.3 Opt-out from analytics
You can opt out of analytics cookies via the cookie consent banner. We do not currently use cross-site tracking or third-party analytics that would benefit from industry opt-out tools.
5. Third-party cookies
Some third-party services we use may set their own cookies when you interact with them through the Service:
- Stripe: sets cookies for payment fraud prevention during checkout. Governed by Stripe's privacy policy.
- Vercel: may set cookies for content delivery and edge routing. Governed by Vercel's privacy policy.
We do not control these cookies. Please refer to the respective providers' policies for details.
6. Do Not Track signals
The Service does not respond to Do Not Track (DNT) browser signals because no industry standard exists for how to interpret them. We treat your cookie preferences as expressed through our cookie banner as authoritative.
7. Changes to this Cookie Policy
We may update this Cookie Policy from time to time, particularly when we add or change cookies. Material changes will be communicated via the Service. The "Effective Date" indicates when this Policy was last updated.
8. Contact
For questions about our use of cookies, contact us at barnabas@sustbridge.com.
This Cookie Policy is part of our broader Privacy Policy.
Effective date: [TO BE FILLED IN UPON LAUNCH]
Last updated: [DATE OF LATEST REVISION]