Cookie Policy

Draft · June 2026 — to be finalized before any commercial or public launch.

We keep cookies and local storage to a minimum. Here is everything ScryMaster uses:

Strictly necessary

• Sign-in session (Supabase auth cookie, e.g. sb-…) — keeps you logged in. Required for the app to function; no consent needed.

Functional (first-party, not tracking)

• Local storage for your display theme, feature toggles, a per-build refresh guard, and your cookie choice. These never leave your device.

Analytics & session replay (consent required)

• PostHog (US) — product analytics and a masked session replay to help us improve the experience. These are off until you click “Allow analytics”, and we honor your browser’s Global Privacy Control / Do Not Track signal as an automatic decline. Text typed into fields is masked.

Manage your choice

Change your decision anytime — it takes effect immediately:

See the Privacy Policy for how data is used and how to request deletion.