1. What Are Cookies
Cookies are small text files that are placed on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites work, work more efficiently, and provide information to the owners of the site.
Alaga uses cookies and similar browser storage (localStorage and sessionStorage) to keep you signed in, remember your preferences, and make the platform work. On our public marketing site (alaga.io) we also use analytics and advertising tags from Google and Meta that set their own cookies. This policy explains which cookies and similar technologies we set or allow, why, and how you can manage them.
2. Cookies We Use
Below is a breakdown of the cookies and similar technologies Alaga sets or allows, organized by category. Some apply only to the app (app.alaga.io and customer portals) and some only to the marketing site (alaga.io); each table says which.
Essential / Strictly Necessary Cookies
These are required for the app to function. Without them, you cannot sign in or use authenticated features, so they cannot be disabled. Note that your sign-in session is not stored in a cookie at all: Supabase Auth keeps it in your browser's localStorage.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
sb-<project-ref>-auth-token | Supabase Auth (localStorage, not a cookie) | Your sign-in session: the access token and refresh token used to verify your identity on each request and keep you signed in between visits | Until you sign out or the session expires |
Functional Cookies
These remember choices you make in the app to improve your experience. They do not track your browsing activity on other sites.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
theme | Alaga (localStorage, not a cookie) | Set by the theme library that renders the app. Alaga currently ships a light theme only, so this value does not change how the app looks | Until cleared |
sidebar:state | Alaga (cookie) | Remembers whether your dashboard sidebar is collapsed or expanded | 7 days |
dashboard-sidebar-state | Alaga (sessionStorage, not a cookie) | Remembers which sidebar groups you have open during the current browser tab session | Until the tab is closed |
Third-Party Cookies
Certain features of the app rely on third-party services that may set their own cookies when those features load. We do not control these cookies directly.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
__stripe_mid, __stripe_sid | Stripe | Fraud prevention and payment security on billing and checkout pages that load Stripe | 1 year / 30 minutes |
Google cookies (e.g. NID) | Google (Places API) | Address autocomplete on address fields. No map is rendered; Google may set its own cookies when the autocomplete library loads | Session / varies |
Analytics and Advertising Cookies (marketing site)
Our public marketing site (alaga.io) loads Google Analytics 4, Google Ads, and the Meta Pixel. These services measure how visitors find and use the site and let us measure and target advertising. They set the following cookies:
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga, _ga_* | Google Analytics 4 | Distinguishes visitors and sessions so we can measure page views, traffic sources, and site usage | 2 years |
_gcl_au, _gcl_aw, _gcl_gs | Google Ads | Conversion measurement: links a visit that came from a Google ad to actions taken on the site (for example, booking a demo) | 90 days |
IDE, test_cookie | Google (DoubleClick) | Ad measurement and, where enabled, ad personalization across Google properties; test_cookie only checks whether cookies can be set | 13 months / 15 minutes |
_fbp, fr | Meta (Facebook) | Meta Pixel: measures visits and conversions from Meta ads and supports ad targeting on Meta platforms | 90 days |
Current status: these tags load when a marketing page is viewed; they do not currently wait for your consent, and they are not used inside the signed-in app. We are adding a consent control that will let you accept or decline analytics and advertising cookies before they load and that will read your browser's Global Privacy Control signal. Until it ships, you can opt out using the options below.
How to opt out of analytics and advertising cookies:
- Google Ads personalization: Google Ads Settings
- Google Analytics: Google Analytics opt-out browser add-on
- Meta advertising: Meta ad preferences
- Industry opt-outs: Digital Advertising Alliance and Network Advertising Initiative
- Browser controls: block third-party cookies or clear cookies for alaga.io (see section 3), or enable the Global Privacy Control signal, which we honour where applicable law requires it
Non-Cookie Technologies
Two services used by the app receive data from your browser without setting cookies. Sentry receives error reports and performance data (including your IP address, browser and device details, and the error itself; session replays are masked so text and media are not captured) so we can find and fix bugs. Open-Meteo receives the coordinates of a business location to show the weather on that business's dashboard; no personal data is sent. Both are listed as sub-processors in our Privacy Policy.
3. How to Manage Cookies
Most web browsers let you view, delete, and block cookies through their settings. The exact steps vary by browser, but you can typically find cookie controls under "Privacy" or "Security" in your browser preferences.
- View and delete individual cookies or clear all cookies at once
- Block all cookies, or only third-party cookies
- Set per-site cookie preferences
- Configure your browser to prompt you before accepting cookies
Important: Blocking site data or localStorage for app.alaga.io (or your business's portal address) will prevent you from signing in to Alaga. Clearing site data will end your current session and require you to sign in again. Blocking third-party cookies does not affect sign-in.
4. Do Not Track
Some browsers offer a "Do Not Track" (DNT) setting that sends a signal to websites requesting that your browsing activity not be tracked. There is no industry standard for responding to DNT, and Alaga does not currently respond to it. The newer Global Privacy Control (GPC) signal is treated as a valid opt-out under several state privacy laws; where those laws apply to you, we honour it, and the consent control described in section 2 will read it automatically once it ships. Until then, please use the opt-out options in section 2 or contact us. For more detail on how we handle your personal data, please see our Privacy Policy.
5. Updates to This Policy
We may update this Cookie Policy from time to time to reflect changes in the cookies and tags we use (for example, when the consent control launches) or for operational, legal, or regulatory reasons. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
6. Contact
If you have questions about our use of cookies or this policy, please contact us at:
Alaga
Email: privacy@alaga.io
For full details on how we collect, use, and protect your personal data, please see our Privacy Policy.