Cookie Policy

Last updated: 19 May 2026

AlmaDeck uses cookies sparingly — only what we need to keep you signed in and the platform secure. We don't use any advertising or third-party tracking cookies, and we don't share your data with companies that do.

Cookies we set

Below is the complete list of cookies the platform uses, what each one does, and how long it sticks around. Every one of them is essential — blocking them will prevent you from signing in.

ab_sessionEssential — Authentication

Identifies your signed-in account when you log in with email and password. Carries a signed JWT — we use it to know who you are on every request.

Lifetime: 24 hours (sliding window — refreshed on each authenticated request)

sb-{project-ref}-auth-tokenEssential — Authentication

Identifies your signed-in account when you log in with Google. Set by Supabase, our authentication provider.

Lifetime: 1 hour for the access token; the refresh token lasts longer and is rotated automatically

sb-{project-ref}-auth-token-code-verifierEssential — Authentication

Used during Google OAuth sign-in to prevent code-interception attacks (PKCE). Deleted immediately after sign-in completes.

Lifetime: A few minutes during sign-in

What we don't use

You won't find any advertising cookies on AlmaDeck. We don't embed Facebook pixels, Google Ads tags, or any other cross-site behavioural tracking. We don't fingerprint your device. We don't build profiles of you for advertisers — there aren't any advertisers on the platform. The cookies above are it.

Managing cookies

You can clear or block AlmaDeck cookies through your browser's privacy settings. Since the cookies we use are essential authentication cookies, blocking them will sign you out and prevent you from logging back in until you allow them again.

Changes

If we add a new cookie or change how an existing one works, we'll update the table above and the "Last updated" date at the top of this page. Material changes will be announced by email.

Questions

Any questions about cookies, tracking, or privacy can go through our contact page.