Cookie Policy

1. What cookies are

Cookies are small text files stored on your device that help websites remember your preferences and understand how the site is used.

2. The cookies we set

sb-* (essential): Supabase authentication. These keep you signed in. Blocking them makes sign-in impossible.

tp_aid (analytics): a random identifier — not your name, email or IP — that lets us count a visitor as one person rather than as a new stranger on every page. Expires after 12 months.

tp_attr (analytics): records how you first arrived — the campaign parameters in the link you clicked, the site that linked to you, and the first page you landed on. It is written once, never updated, and expires after 90 days. It is how we learn which articles are worth writing more of.

We do not use advertising cookies, and we do not sell or share this data with advertisers.

3. Do Not Track and Global Privacy Control

If your browser sends a Do Not Track (DNT) or Global Privacy Control (GPC) signal, we set neither analytics cookie and load no analytics script. This is enforced at our edge before any page is rendered — it is not a setting we ask you to trust us with afterwards. Essential sign-in cookies still work, so the site remains fully usable.

4. Third-party cookies

Google Analytics 4 sets its own cookies to measure traffic, and PostHog sets one to measure product usage. Both load only after the page is interactive, and neither loads at all if you send a DNT/GPC signal. We do not run advertising or retargeting tags.

5. Managing cookies

You can accept, block or delete cookies through your browser settings, and you can turn on Do Not Track or Global Privacy Control to opt out of analytics entirely. Blocking essential cookies will affect sign-in and core features.

6. Changes

We may update this policy and will revise the date above when we do.