What cookies are
Cookies are small text files a website stores in your browser to remember things between page loads — your sign-in session, your preferred language, anonymous analytics. Some are essential; others are optional.
What we set
| Cookie | Purpose | Duration | Category |
|---|---|---|---|
| sb-access-token / sb-refresh-token | Keeps you signed in to your workspace. Required — clearing it signs you out. | Session + 7-day refresh | Strictly necessary |
| next-auth.csrf-token (if applicable) | Prevents cross-site request forgery on auth + form submissions. | Session | Strictly necessary |
| _vercel_jwt | Edge network session — used by our hosting provider for routing and DDoS protection. | Session | Strictly necessary |
| va-* (Vercel Analytics) | First-party aggregate page-view + Web Vitals metrics. No cross-site tracking, no advertising profile, no cookies sent to third-party ad networks. | 24 hours | Analytics |
What we don't set
- No third-party advertising cookies.
- No cross-site tracking pixels.
- No Facebook Pixel, no Google Ads remarketing tag, no LinkedIn Insight tag.
- No browser-fingerprint trackers.
We also use Umami, a privacy-focused analytics tool that counts page views and referrers in aggregate. It sets no cookiesand stores no cross-site identifiers, which is why it doesn't appear in the cookie table above.
How to opt out
Strictly-necessary cookies cannot be disabled without breaking sign-in — if you don't want them, don't use the platform.
Analytics cookiescan be blocked through your browser's privacy settings (most modern browsers offer "Block third-party cookies" and tracker-protection toggles), or by sending a Do Not Track / Global Privacy Control signal — we honour both.
Changes
If we add a new cookie or change the purpose of an existing one, we'll update this page and the last-updated date.
Contact
Questions: support@asinbuyer.com.