Cookie notice
Effective January 1, 2027
This notice lists every cookie, browser storage item and outside script CODEBRICK uses. Cookies are small files a website stores in your browser; local storage is a similar space that stays on your device. Codebrick LLC uses them only to make the service work.
Everything we use
| Name | What it is | Why | Essential |
|---|---|---|---|
| sb-…-auth-token | Cookie (Supabase Auth, our domain) | Keeps you signed in. Holds a signed session token; removed when you sign out. | Yes |
| cb_workspace | Cookie (our domain) | Remembers which workspace you picked. Holds only a workspace ID; kept a year. | Yes |
| cb_theme | Cookie (our domain) | Remembers your theme in Settings › Appearance (system, light or dark). Holds only that word; kept a year. | Yes |
| cb_after_confirm | Cookie (our domain) | Brings you back to a workspace invite after you confirm your email. Kept a day at most, deleted once used. | Yes |
| cb_remembered_email | Local storage | Fills in your email on the sign-in form, only if you tick "Remember me". Never your password. | Yes (you choose it) |
| cb-invite-notice:… | Local storage | Remembers that you saw the "invite code worked" message, so it shows once. | Yes |
| Cloudflare Turnstile | Script from challenges.cloudflare.com | On the sign-up and forgot-password pages only: checks that the request comes from a person. Cloudflare may use its own storage to complete the check. | Yes (security) |
| Supabase | Requests to our Supabase project | The app reads and saves your projects and files through our database provider. | Yes |
| OpenStreetMap tiles | Map images from tile.openstreetmap.org | On the coverage map only (the public /coverage page and Admin › Jurisdictions): your browser loads the map tiles from OpenStreetMap, so your IP address is sent to OpenStreetMap. | Yes (the map) |
| Stripe Checkout | Stripe’s own pages, on stripe.com | Only when you pay: Stripe sets its own cookies on its domain for fraud prevention and payment. | Yes (payment) |
Fonts are served from our own site, so loading a page makes no request to a font service.
An address you look up on the coverage page is sent from our server, not your browser, to the US Census Bureau geocoder to find its city. We don't save the address.
What we do not use
We do not use advertising cookies, ad pixels, session replay, third-party analytics or any other third-party tracker, and we do not let advertisers set cookies through the service. To understand how the service is used, we look only at records in our own database.
Why there is no cookie banner
Everything above is needed for the service to work or to keep it secure, so there is nothing to turn on or off. If we ever add something that is not essential, it will stay off until you agree, and a Global Privacy Control signal from your browser will be treated as a no.
Managing cookies
You can clear or block cookies in your browser settings. Blocking the session cookies will sign you out and stop the app from working. Signing out removes the session cookies.
Changes and contact
We will update this notice if what we use changes. For more about how we handle your information see the Privacy Policy. Questions: legal@codebrick.ai.
Codebrick LLC · Effective January 1, 2027