Cookie Policy

Effective date: October 4, 2026

1. What we use cookies for

Cookies are small text files stored on your device. We use a minimal set: some are strictly necessary to run WriteFlow, and one optional analytics cookie is set only if you consent. We do not use advertising or cross-site tracking cookies.

2. Essential cookies (always on)

Session cookies (Supabase Auth): keep you signed in securely between visits. Without them the site would sign you out on every page.
Security cookies/tokens: help prevent cross-site request forgery and abuse.

These are strictly necessary, so they cannot be refused — they are covered by the “essential” category in our Privacy Policy.

3. Preference cookie

wf_consent remembers whether you accepted or rejected non-essential cookies, so we do not ask you again on every visit. It expires after 180 days. Clearing it makes the consent banner reappear.

4. Analytics cookies (optional, consent-based)

Google Analytics cookies (_ga and friends) are set only if you press Accept all in our consent banner. If you reject, the analytics script is never loaded — no pageview data is collected. You can change your mind anytime via Cookie preferences in the footer.

5. Local storage

We store a few preferences in your browser’s local storage instead of cookies (for example, your light/dark theme choice). These stay on your device and are not sent to us with every request.

6. Embedded video (click-to-load)

Articles can contain YouTube videos. We do not load the embed until you press play; only then can YouTube set its own cookies. Sign-in with Google loads Google’s page only when you choose that option.

7. Managing cookies

Use Cookie preferences in the footer to accept or reject analytics at any time.
Your browser’s settings can block or delete cookies entirely — blocking essential cookies will sign you out and break sign-in.