Cookie Policy
Huling na-update: 6 October 2026
Ang maikling bersyon
- Kakaunti lang ang cookies namin, at kailangan nila para gumana ang app.
- Walang advertising cookies. Walang tracking para sa ads. Hindi kami nagbebenta ng datos.
- Kung i-block mo ang essential cookies, hindi ka makaka-login.
1. What cookies are
Cookies are small text files a site stores in your browser. Similar technologies — localStorage, sessionStorage — work the same way. This policy covers all of them.
2. What we actually use
We keep this list honest and short. We do not run advertising cookies, and we do not sell data to advertisers.
Strictly necessary — cannot be disabled
| Cookie | Set by | Purpose | Lifetime |
|---|---|---|---|
sb-access-token | Supabase | Keeps you signed in | 1 hour, refreshed |
sb-refresh-token | Supabase | Renews your session without re-login | 30 days |
__Host-csrf | TindahanAI | Protects forms from cross-site request forgery | Session |
These are required for the service to function. Under the DPA and standard practice, strictly necessary cookies do not require prior consent — but you are entitled to know they exist, which is what this page is for.
Preferences
| Item | Set by | Purpose | Lifetime |
|---|---|---|---|
tindahan-locale | TindahanAI | Remembers your language | 1 year |
tindahan-ui | TindahanAI | Remembers small interface choices — which tab was open, whether a panel was collapsed | 1 year |
Stored in your browser only. Never sent anywhere, never used to identify you.
Analytics
[IF ANALYTICS IS ENABLED — otherwise delete this block]
Item Set by Purpose Lifetime _vaVercel Analytics Aggregate page-view counts 24 hours Vercel Analytics is cookieless and does not build a cross-site profile of you. We use it only to see which pages are used.
If you have not enabled analytics, delete the block above rather than leaving it in. A cookie policy listing cookies you do not set is worse than no policy — it is inaccurate, and inaccuracy is the one thing a regulator will hold against you.
3. Third parties
Authentication providers. Signing in through Facebook or Google means those providers may set their own cookies under their own policies: Facebook · Google
Infrastructure. Cloudflare may set a security cookie (__cf_bm) to distinguish humans from bots. It carries no personal profile and lasts 30 minutes.
We embed no advertising networks, no social sharing widgets, and no third-party trackers.
4. Managing cookies
You can clear or block cookies in your browser settings — Chrome, Safari, Firefox, and Edge all provide controls.
Blocking strictly necessary cookies will prevent you from signing in. Blocking preference cookies only means the app forgets your language and layout choices.
5. Changes
We will update this page whenever our cookie use changes, and revise the date at the top.