Cookie policy.

Last updated: 17 May 2026Effective from: 17 May 2026

This Cookie Policy explains what cookies and similar technologies we use on BoardMatey, why we use them, and the choices you have. It sits alongside our Privacy Policy and forms part of our Terms of Use.

1. What cookies are

Cookies are small text files placed on your device when you visit a website. They let the site remember things between visits — for example, that you're signed in or what theme you've chosen. We also use similar technologies (like localStorage in your browser) which work in much the same way.

2. The cookies we use

BoardMatey uses a small, deliberate set of cookies. We do not use third-party advertising cookies or cross-site tracking pixels.

Cookie / storagePurposeTypeExpires
sb-* (Supabase)Keeps you signed in between visits and refreshes your session securely.EssentialSession / up to 1 year
boardmatey-csrf-tokenProtects forms and API requests against cross-site request forgery attacks.EssentialSession
boardmatey-mfa-trustRemembers a device you've marked as trusted so we don't ask for MFA every time.Essential (security)Up to 30 days
boardmatey-legal-banner-dismissed:* (localStorage)Remembers that you've dismissed the in-app notice about an upcoming Terms or Privacy update.FunctionalUntil the next update is published
theme (localStorage)Remembers your light/dark mode preference.FunctionalUntil you clear browser storage

We may add or change cookies as the Service evolves. If we ever introduce non-essential cookies (for example, analytics or product-insight cookies), we'll update this Policy and ask for your consent first where required by law.

3. What we don't use

We don't use:

  • Third-party advertising or retargeting cookies.
  • Cross-site tracking pixels.
  • Cookies that build a profile of you for advertisers.
  • Fingerprinting techniques.

Paid plans are, and will remain, free of advertising and tracking for ads. See section 7 of our Terms of Use for more detail.

4. Managing cookies

You can control cookies through your browser settings. Most browsers let you:

  • See which cookies a site has stored;
  • Delete some or all cookies;
  • Block cookies from specific sites or all sites; and
  • Be warned before a cookie is stored.

Helpful guides:

If you block our essential cookies, parts of BoardMatey — including signing in — may not work.

5. Do Not Track and Global Privacy Control

Because we don't run cross-site tracking, we treat Do Not Track (DNT) and Global Privacy Control (GPC) signals as automatically respected: there's nothing for us to turn off. If we ever introduce optional analytics or marketing tracking, we'll honour GPC signals at the browser level.

6. Changes to this Policy

We may update this Policy as our cookie use changes. The "Last updated" date at the top tells you when we last changed it. Material changes will be flagged in-app where they affect the choices you have.

7. How to contact us

Questions about cookies? Email support@boardmatey.com.