Cookie Policy

This Cookie Policy explains how Othr uses cookies and similar technologies (such as browser localStorage, sessionStorage and pixels) on askothr.com and within the product. It should be read together with our Privacy Policy.

1. What cookies are

A cookie is a small text file stored on your device by your browser when you visit a website. Cookies can be "session" cookies (deleted when you close the browser) or "persistent" cookies (kept for a defined period). They can be set by us ("first-party") or by a third party we work with ("third-party").

We also use related technologies that are not technically cookies but serve a similar purpose, including localStorage and sessionStorage for preferences and offline state. For simplicity we refer to all of these as "cookies" in this policy.

2. The categories we use

2.1 Strictly necessary

Required for the Service to function. They cannot be turned off because doing so would break core features like sign-in, security and payments.

• Authentication tokens and session cookies (Supabase).
• CSRF and security cookies.
• Bot mitigation and abuse prevention (Cloudflare, Turnstile).
• Cookie consent state itself (so we remember your choice).
• Checkout and subscription cookies set by Stripe during payment flows.

Legal basis: legitimate interests in providing a secure service; necessary for performance of the contract you have with us. No consent required.

2.2 Analytics (optional)

Help us understand how the product is used so we can improve it. Set only after you opt in.

• Aggregate, pseudonymised usage events (which features are used, error rates, latency).
• Performance and reliability metrics.

Legal basis: your consent (UK GDPR Article 6(1)(a) and PECR Regulation 6).

2.3 Preferences (optional)

Remember settings so the experience feels more like yours.

• Theme (light / dark / system).
• Language and locale.
• Workspace and UI preferences.

Legal basis: your consent.

2.4 Marketing (optional, off by default)

We currently run no third-party advertising trackers. If we add lightweight, privacy-respecting marketing attribution in the future (for example, to measure referral campaigns), it will be off by default and only enabled with your consent.

Legal basis: your consent.

3. Third parties that may set cookies

The Service relies on a small set of trusted providers. Some of these may set cookies when their components are loaded:

• Supabase — authentication and session cookies (strictly necessary).
• Cloudflare — security, performance and bot mitigation cookies (strictly necessary).
• Cloudflare Turnstile — CAPTCHA-style bot challenges on sign-up and sensitive forms (strictly necessary).
• Stripe — checkout, subscription management and fraud-prevention cookies set when you complete a payment or manage billing (strictly necessary for billing).

These providers process cookies under their own privacy notices. We do not control the precise cookies they set, but we choose providers that document their use and minimise data collected.

4. Managing your preferences

You control optional cookies in three ways:

• Open cookie preferences — change your choices at any time. Your selection is saved in your browser.
• Through your browser settings, where you can block or delete cookies, restrict third-party cookies, or browse in private mode.
• Via opt-out mechanisms offered by any analytics provider we use (where applicable).

Disabling strictly-necessary cookies will break parts of Othr, notably sign-in, checkout and security features. We don't recommend it.

5. Retention

Session cookies are cleared when you close your browser. Persistent cookies expire after a defined period (typically up to 12 months) or sooner if you delete them. Your cookie consent choice is stored for up to 12 months, after which we will ask again.

6. Do Not Track and Global Privacy Control

Browser "Do Not Track" signals are not consistently defined across browsers, so we do not currently rely on them. Where your browser sends a Global Privacy Control (GPC) signal and you are in a jurisdiction that legally recognises it, we will treat it as an opt-out of optional analytics and marketing cookies.

7. Changes to this policy

We may update this Cookie Policy from time to time. The "Last updated" date at the top of this page shows when it was last revised. Material changes will be flagged in the product.

8. Contact

Questions about cookies? Email contact@askothr.com.