Cookies & Local Storage

We do not use cookies for tracking. What we store in your browser's local storage (not cookies) is:

• Your sign-in session — a Supabase authentication token, strictly necessary to keep you signed in.
• Functional caches — company data tab results, cached for 1 hour, and your dashboard history (your last 100 assessments and last 10 searches). This stays on your device and is never sent to our servers.
• Investigation workspace notes and links — kept until you clear them. You can manage or clear this from the My Data page.

Our error-monitoring tool (Sentry) also runs in your browser to report errors and page performance. It does not record your session.

We use Vercel Web Analytics and Vercel Speed Insights, which are designed to work without cookies or storing an identifier on your device — visitors are counted using a daily-rotating, anonymised hash rather than a persistent ID. If we ever switch to a storage-based analytics tool, we will ask for your consent first.

Checkout Stripe sets its own cookies while you are on the checkout page — see Stripe's privacy and cookie notice for details of what it stores.

Signing in with Google, GitHub or LinkedIn If you sign in with one of them, you are taken to that company's own sign-in page, which sets its own cookies under its own cookie policy. We do not see or control those cookies.

We do not run any advertising or cross-site tracking cookies anywhere on the site.