Cookie Policy
What we store in your browser, and how to say no.
Effective 23 August 2026Last updated 23 August 2026
5.1 Strictly necessary — always on
These cannot be turned off; without them you cannot sign in.
| Purpose | Set by | Life |
|---|---|---|
| Sign-in session and its refresh | Supabase (first-party) | Session, renewed while you are active |
| Cross-site request forgery protection | Runsheet | Session |
| Your cookie choice itself | Runsheet | 6 months |
5.2 Analytics — only with your consent
| Purpose | Set by | Life |
|---|---|---|
| Which pages and features get used, so we know what to build | PostHog | Up to 12 months |
Declining means PostHog is never loaded. Not loaded and told not to track — not loaded at all.
5.3 Advertising
The public directory and guide pages may in future carry advertising. If and when they do, this policy will list what those cookies are before a single one is set, and they will be governed by the same banner. Nothing inside the application will ever carry advertising, and no data from inside the application will ever be used to target an advert.
5.4 Changing your mind
Use the "Cookie preferences" link in the footer, on any page, at any time. You can also clear cookies in your browser; you will be asked again on your next visit.
Runsheet's application does not work without its session cookies. The public directory, the guides and the tools work fine with everything declined.
5.5 Do Not Track
We honour the Global Privacy Control signal, and treat it as a decline of analytics.