Cookies & Local Storage
A full disclosure of every cookie and browser-storage item SpicaNova AI sets — and what it is used for.
No consent banner required
SpicaNova AI does not use advertising, analytics, session-replay, A/B-testing, or cross-site tracking cookies. The only cookies we set are strictly necessary for the product to function (keeping you signed in). Under GDPR and ePrivacy rules, strictly-necessary cookies are exempt from consent requirements.
We will add a cookie-consent interface if we ever introduce analytics or marketing scripts. We will update this page before that happens.
Full storage inventory
| Name | Type | Purpose | Expiry | Category |
|---|---|---|---|---|
| sb-<project>-auth-token | Cookie (httpOnly, Secure, SameSite=Lax) | Supabase session token — keeps you signed in to the SpicaNova app. Set by Supabase Auth on login; cleared on sign-out. | Session / rolling (configurable in Supabase Auth settings) | Strictly necessary |
| sb-<project>-auth-token-code-verifier | Cookie (httpOnly, Secure) | PKCE code verifier for the OAuth sign-in flow. Temporary, cleared after sign-in completes. | Short-lived (minutes) | Strictly necessary |
| sn-theme | localStorage (browser) | Your light/dark theme preference. Stays on your device, never sent to our servers. | Persistent (until cleared by you) | Preference / functional |
| spicanova-font-choice | localStorage (browser) | Your font-style preference. Stays on your device, never sent to our servers. | Persistent (until cleared by you) | Preference / functional |
| sn-layout-mode | localStorage (browser) | Which dashboard layout you last used. Stays on your device, never sent to our servers. | Persistent (until cleared by you) | Preference / functional |
| sn-lab-accent | localStorage (browser) | Your accent-colour choice for the dashboard. Stays on your device, never sent to our servers. | Persistent (until cleared by you) | Preference / functional |
| sn-lab-sidebar | localStorage (browser) | Whether you left the sidebar open or collapsed. Stays on your device, never sent to our servers. | Persistent (until cleared by you) | Preference / functional |
| lab.outreach.senderSetup.open | localStorage (browser) | Whether the sender-setup panel on the outreach page is expanded. Stays on your device, never sent to our servers. | Persistent (until cleared by you) | Preference / functional |
| Sentry SDK (server-side only) | Server-side session (no device cookie) | Error monitoring. Sentry is initialized only on the server; it does not set any cookie in your browser. PII is scrubbed before transmission. Error events are fingerprinted and stored internally. | N/A — no device storage | Strictly necessary (reliability / security monitoring) |
Third-party cookies
SpicaNova AI does not embed any third-party analytics, advertising, social-media tracking, or session-replay scripts. No third party sets cookies in your browser when you use SpicaNova.
The Google OAuth consent screen (accounts.google.com) is served by Google and is subject to Google's Privacy Policy. SpicaNova does not control cookies set by Google during the OAuth authorization flow.
Managing cookies and storage
You can clear SpicaNova cookies and localStorage items at any time using your browser's developer tools or privacy settings. Clearing the auth cookie will sign you out. Clearing localStorage will reset your theme and font preference to the defaults.
Because all cookies we set are strictly necessary, blocking them will prevent the signed-in product from working. The public marketing pages do not require any cookies.
Questions
For questions about this disclosure, contact hello@spicanova.ai.