01What are cookies
Cookies are small text files that websites store on your device (computer, phone, tablet) when you visit them. They allow the website to remember you between visits — for example, to keep you signed in or remember your preferences.
We also use similar technologies like localStorage and sessionStorage, which work the same way but store data directly in your browser. For simplicity, we refer to all of these as "cookies" in this policy.
02How we use cookies
We use cookies for one reason only: to make the service work. Specifically:
- To keep you signed in to your account between page loads
- To remember your preferences (e.g. billing cycle toggle, dismissed banners)
- To protect against CSRF attacks and other security threats
We do not use cookies for:
- Advertising or behavioural tracking
- Profiling or building marketing audiences
- Cross-site tracking
- Third-party analytics that share data with other companies
03Types of cookies we use
04Third-party cookies
We use a small number of trusted providers to run our service. The cookies these providers set are limited to what's needed for security and functionality.
| Provider | Purpose | Privacy policy |
|---|---|---|
| Supabase | Authentication and session management | supabase.com/privacy |
| Cloudflare | Security, DDoS protection, bot detection | cloudflare.com/privacypolicy |
| Stripe (future) | Payment security and fraud prevention | stripe.com/privacy |
| PostHog (analytics, opt-in) | Product analytics — loads only after “Accept all” consent | posthog.com/privacy |
05Managing your preferences
We use strictly necessary and functional cookies, plus optional analytics cookies (PostHog) that load only with your consent. UK PECR doesn't require a consent banner for the necessary and functional cookies, but we still show a brief notice on your first visit so you can record a preference. Choosing “Essential only” declines the optional analytics cookies — they never load. Choosing “Accept all” enables PostHog product analytics. We store your choice in your browser as ll_cookie_consent so we don't ask again, and you can change it by clearing that value in your browser storage.
If you want to opt out anyway, you can:
- Sign out of your account, which clears the authentication cookies
- Clear your browser cookies and storage via your browser settings — this will also sign you out and reset preferences
- Block all cookies in your browser — but note that this will prevent you from signing in or using authenticated features
Most browsers let you manage cookies in detail. Here are quick links:
06Changes to this policy
If we change which cookies we use, we'll update this policy and the "Last updated" date at the top. For material changes — like adding analytics or advertising cookies — those will only ever load after you've chosen “Accept all” on the notice, and we'll notify existing users by email.
07Contact us
For questions about cookies or your privacy, contact:
Data Protection Contact
Email: privacy@lowlight.host
See our full Privacy Policy for details about how we handle personal data.