What we set
| Cookie | Category | Set by | Expires | What it does |
|---|---|---|---|---|
| sb-<project>-auth-token | Strictly necessary | Supabase Auth | Until you sign out | Keeps you signed in. Holds the session token; without it every page load would ask for your password. May be split across numbered cookies when the token is long. |
| NEXT_LOCALE | Functional | Weekwright | 1 year | Remembers whether you chose English or Spanish, so the app does not reset to English on every visit. |
| ph_<key>_posthog | Analytics | PostHog | 1 year | Distinguishes one visit from the next so we can see which features are used and where people get stuck. Never receives the content of your schedules, your notes, or anything you type to the AI. |
PostHog also uses your browser's local storage alongside its cookie. Clearing site data removes both.
Why there is no cookie banner
Consent banners exist because of advertising and cross-site tracking. We do neither: no ad networks, no third-party marketing pixels, nothing that follows you to another site. Two of our three cookies are needed for the product to work at all — you cannot stay signed in without a session cookie — and consent is not required for those anywhere.
That leaves analytics, which runs on our legitimate interest in knowing which features get used. Weekwright is offered in the United States (Terms §1), where no law requires a banner for it. Adding one anyway would ask your permission for something we were always allowed to do, and the honest effect of that is to train people to dismiss dialogs without reading them.
So instead of a banner you get a control that does something, on a page you can find. If we ever add advertising or start selling into the EU, this section changes and a real consent mechanism ships with it.
Turning analytics off
This setting applies to this browser and persists across visits.
We also honour Global Privacy Control and Do Not Track. When your browser sends either, analytics is never initialised — no cookie is written and no request is made, so there is nothing to opt out of afterwards. This is enforced by a test, not by intention.
You can also block or delete cookies in your browser settings. Deleting the session cookie signs you out; deleting the language cookie resets the app to English.
Changes
If we add a cookie, it appears here before it ships, and this page is the authoritative list. The Privacy Policy covers everything else we do with data, and the subprocessors page lists who receives it.
Contact
Questions: privacy@weekwright.com.