Cookie policy

What we checked

Public pages do not set a cookie. The middleware creates a Supabase client, which can set a session cookie, only on /admin. Vercel Web Analytics is cookieless. The theme uses localStorage (theme), not a cookie. Subscribing to the newsletter does not create a user session and does not set a tracking cookie.

Why there is no banner

EU rules ask for consent before a cookie that is not strictly necessary. Nothing on the public site meets that description. A banner would not switch any tracker off, so we do not show one. If we later add a non-essential cookie, we will ask first and we will update this page.

Strictly necessary cookies

An editor who signs in at /admin gets the Supabase auth cookies for that session. Opening the private partner summary with a token in the query string sets stiriai_partner_admin, httpOnly, only on /admin/parteneri, for eight hours, and Secure when the site is served over HTTPS. The token is then removed from the address bar. Readers do not get these cookies.

Affiliate links

/go/slug does not set a cookie. The server stores a salted hash of the IP, not the raw IP. See the privacy policy.