1. What Are Cookies?

Cookies are small text files stored on your device by your browser. They are used to remember information about you, such as login status or preferences. Cookies can be:

Session: Deleted when browser closes
Persistent: Stored until expiration date
First-party: Set by Zovik
Third-party: Set by other domains (rare on Zovik)

2. Cookies We Use

Essential Cookies (Required)

These cookies are necessary for the Service to function:

Cookie Name	Purpose	Expiry
sb-auth-token	Supabase session authentication	1 hour
sb-refresh-token	Supabase session refresh (to keep you logged in)	7 days
sb-access-token	API request authorization	1 hour
theme	Your theme preference (light/dark)	1 year

Analytics Cookies (Optional)

We do not use Google Analytics, Mixpanel, or similar. We only track errors via Sentry (see Privacy Policy).

Third-Party Cookies

We do not embed third-party trackers or ads. No third-party cookies are set unless you:

Click a link to an external site (outside Zovik's control)
Use social login (Google, GitHub) — they set their own cookies

3. Tracking Technologies

Besides cookies, we use:

LocalStorage: Browser storage for your preferences and state (not sent to server)
Session Storage: Temporary storage during your session
Error Tracking: Sentry captures errors + performance metrics (see Privacy Policy for filtering)

4. How to Control Cookies

You can control cookies via your browser settings:

Chrome: Settings → Privacy and security → Cookies and other site data
Firefox: Preferences → Privacy → Cookies and Site Data
Safari: Preferences → Privacy → Manage Website Data
Edge: Settings → Privacy, search, and services → Cookies and site permissions

⚠️ Warning: Disabling essential cookies will break login functionality.

5. Do Not Track (DNT)

We respect the Do Not Track (DNT) signal. If your browser sends DNT: browser:not.feature (DNT is advisory only, we honor it by not enabling analytics tracking).

6. Cookie Consent

Zovik uses only essential cookies. Since all cookies we set are necessary for the Service to function, we do not require consent under GDPR (Recital 32) — essential cookies are exempt.

If we add analytics cookies in the future, we will request explicit consent and update this policy.

7. Cookie Retention

Type	Retention
Auth tokens	1-7 days (or until logout)
Preferences	1 year
Session data	Until browser closes

8. Data Sharing & Cookies

Cookies are not shared with third parties. However, your session ID is validated by Supabase, which stores cookies in their secure environment. See Privacy Policy for details on data sharing with Supabase and other services.

9. Changes to This Policy

We may update this Cookies Policy if we add new cookies or change how we use them. Changes take effect 30 days after posting.

10. Questions?

For questions about cookies or this policy, email:

privacy@zovik.com