Skip to content

Cookie Policy

Last updated: [YYYY-MM-DD]

This Cookie Policy explains the cookies and similar technologies [YOUR-COMPANY-NAME] uses on our website and dashboard, why we use them, and how you can control them.

We keep the list short on purpose. We do not run advertising cookies and we never sell tracking data to third parties.

  • Strictly necessary cookies — required for the Service to function; cannot be disabled.
  • Functional cookies — improve your experience; can be cleared via browser settings.
  • Analytics cookies — enabled only when configured by the operator; opt-out available in /dashboard/settings.

What is a cookie

A cookie is a small text file your browser stores when you visit a website. It lets the site remember things between page loads — such as whether you are signed in or which theme you picked. Similar technologies (localStorage, sessionStorage, secure HTTP-only tokens) are used the same way and are covered by this policy.

  • Session cookies — exist only for the duration of your browser session; deleted when you close the tab.
  • Persistent cookies — stored for a defined period; used for preferences like language and theme.
  • First-party cookies — set by [YOUR-COMPANY-NAME] directly; the only kind we use.
  • Third-party cookies — set by external domains; we do not use these for tracking or advertising.

Strictly necessary cookies

These keep the Service working. They cannot be turned off — without them you could not sign in or move between pages.

  • Session cookie — keeps you signed in across requests. HttpOnly, Secure, SameSite=Lax. Expires when you sign out or after the configured idle window.
  • CSRF token — prevents cross-site request forgery on state-changing endpoints. Rotated on every sign-in.
  • Locale cookie — remembers the language you picked (en, fr, ...). Necessary so the dashboard renders in your language on the next visit.

Functional cookies

These remember preferences that improve your experience. They are not required to operate the Service.

  • Theme preference — light / dark / system, persisted in localStorage so your choice survives across sessions.
  • Dismissed banners — remembers banners you have closed (compliance, beta, info) so we do not nag you again.
  • Saved views — keeps the layout of dashboard tables (filters, sort, density) per user and per table.

Analytics cookies

When the operator enables PostHog, we capture anonymised product analytics — page views, feature usage, and error events — to decide what to fix and what to build next.

Analytics are off by default in the boilerplate. When enabled, you can opt out at any time from /dashboard/settings → Preferences. We never sell analytics data and never use it to build a profile of you outside the Service.

  • PostHog session cookie — identifies your session for event attribution; pseudonymised.
  • PostHog device ID — stored in localStorage; used to stitch events across page loads.
  • IP addresses are anonymised at ingestion when required by GDPR. Raw IPs are never stored.

No advertising cookies

We do not run any advertising, retargeting, or cross-site tracking cookies. We do not embed third-party ad pixels (Meta, Google Ads, TikTok, ...). If a fork of this boilerplate adds them, that fork is responsible for updating this page and surfacing a consent banner where required.

  • No Meta Pixel, Google Ads tag, TikTok Pixel, or equivalent advertising script is loaded.
  • No cross-site tracking identifiers are shared with advertising networks.
  • If you see advertising cookies from a fork of this product, contact that operator — not us.

How to control cookies

You stay in control.

  • In the dashboard — opt out of analytics from /dashboard/settings → Preferences. Strictly necessary cookies cannot be disabled there because the Service would stop working.
  • In your browser — you can clear cookies, block third-party cookies, or use a private window. Most browsers offer per-site controls in their settings.
  • Do Not Track / Global Privacy Control — we honor GPC signals as an opt-out for analytics where applicable.
  • Removing strictly necessary cookies will sign you out and may break the Service until you re-authenticate.

Questions

Reach us at [YOUR-DPO-EMAIL] for anything related to cookies or privacy. For the full picture, see the Privacy Policy.

  • Cookie / privacy inquiries — [YOUR-DPO-EMAIL]
  • To opt out of analytics — /dashboard/settings → Preferences
  • To clear all cookies — use your browser's privacy or site-data settings