Cookie Policy
Last updated: 21 July 2026 · Effective: 21 July 2026
Short version: Aproli does not use advertising cookies, tracking pixels, or third-party analytics. We only store what's needed to keep you signed in, remember your settings, and process payments securely. That's why you don't see a cookie banner — under EU law, strictly necessary storage doesn't require consent.
1. What cookies and browser storage are
A cookie is a small text file a website saves in your browser so it can recognise you on your next request. Local storage and session storage do a similar job but stay in your browser and are never sent automatically to a server — Aproli uses these more than it uses cookies.
The rules that apply depend on what the storage is for, not what it's called. Strictly necessary storage — the kind without which the service simply doesn't work — doesn't need your consent. Anything used for advertising or cross-site tracking does. We only use the first kind.
2. Essential cookies and storage
These keep the service working. They cannot be switched off without breaking sign-in or payments.
| Name | Set by | Purpose | Type & duration |
|---|---|---|---|
sb-*-auth-token |
Aproli (Supabase) | Keeps you signed in, so you don't have to log in on every page. Contains your session token. | Local storage — until you sign out or the session expires |
__stripe_mid |
Stripe | Fraud prevention — identifies the device used for a payment. | Cookie — 1 year |
__stripe_sid |
Stripe | Fraud prevention within a single checkout session. | Cookie — 30 minutes |
3. Functional storage (remembering your preferences)
These live entirely in your browser and are never sent to us as cookies. They exist so the app feels the same when you come back.
| Key | What it remembers | Duration |
|---|---|---|
aproli-theme | Light or dark mode | Until you clear your browser |
aproli-active-brand-workspace | Which brand workspace you were last using | Until you clear your browser |
aproli-brand-settings-tab | The settings tab you last had open | Until you clear your browser |
aproli-campaign-wizard | A draft campaign in progress, so you don't lose it if you close the tab | Until submitted or cleared |
| Dashboard cache keys | A short-lived copy of your dashboard figures so the page loads instantly | Refreshed on each visit |
| View and tab state | Which page or tab you were on, so a refresh doesn't lose your place | Session storage — cleared when you close the tab |
4. Third-party services that load on our pages
| Service | Why it's there | What it sets |
|---|---|---|
| Stripe | Payments, subscriptions and payouts | The fraud-prevention cookies listed above |
| Supabase | Your account, database and sign-in | The session token in local storage |
| Phyllo | Connecting your social accounts (loads only when you start a connection) | Session storage needed to complete the connection flow |
| Google Fonts | Serves the typefaces used across the site | No cookies. Your IP address is visible to Google when the fonts load |
| Vercel | Hosts and delivers the website | No tracking cookies |
Each provider's own privacy policy applies to the data it receives: Stripe, Supabase, Phyllo, Google, Vercel.
5. What we don't use
Aproli does not use:
- advertising or retargeting cookies;
- the Meta pixel, TikTok pixel, or any other ad-network tag;
- Google Analytics or any third-party analytics suite;
- cross-site tracking or device fingerprinting;
- data brokers, or the sale of any data to anyone.
If we ever add analytics or marketing cookies, we'll ask for your consent first with a proper banner, and update this page before switching anything on.
6. Campaign tracking links
Brands can generate tracking links for their campaigns. When someone clicks one, we record that a click happened — the time, the campaign, and the creator it belongs to — before forwarding them to the brand's destination. This is used to count clicks, not to build a profile of the visitor. No cookie is placed on the visitor's browser by that redirect.
7. How to control cookies and storage
You can clear or block cookies and site data in your browser settings at any time:
Because everything we store is essential or functional, blocking it will sign you out and reset your preferences. Payments may stop working if Stripe's cookies are blocked.