2. How we use cookies
Yoria uses cookies and local storage for:
- Keeping you logged in across page loads (authentication)
- Protecting against cross-site request forgery (CSRF security)
- Remembering your theme preference (dark or light mode)
- Storing your cookie consent choice
- Bot protection during login and signup (Cloudflare Turnstile)
We do not use cookies for advertising, remarketing, or cross-site tracking.
3. Essential cookies
Essential cookies are strictly necessary for the platform to function. Without these, login and authenticated sessions would not work. These cookies cannot be disabled while using Yoria.
| Cookie name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
sb-rcncvnexfndapjpvkbmv-auth-token | Supabase | Authentication session. Contains the access token and refresh token for your login session. Set with SameSite=Lax and HttpOnly flags for security. | Cookie | Session / refresh cycle |
sb-rcncvnexfndapjpvkbmv-auth-token.0, .1 | Supabase | Chunked auth cookie. When the auth token exceeds browser cookie-size limits, Supabase splits it across numbered chunks. | Cookie | Session / refresh cycle |
Supabase uses short-lived access tokens with automatic refresh-token rotation. Refresh-token reuse detection is enabled, meaning a stolen refresh token is automatically invalidated if the legitimate session refreshes first.
4. Security cookies
These cookies protect your account against common web attacks.
| Cookie name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
x-csrf-token | Yoria | CSRF double-submit token. Prevents cross-site request forgery by requiring every mutation request to echo this cookie value as an HTTP header. Does not contain personal data. | Cookie | Session |
cf_clearance | Cloudflare Turnstile | Bot verification during login and signup. Set by Cloudflare after completing the Turnstile challenge. Does not track you across sites. | Cookie | Session (up to 30 minutes) |
5. Functional storage
Functional storage remembers your preferences. Disabling local storage will not prevent you from using Yoria, but your theme preference will not persist between sessions.
| Storage key | Type | Purpose | Duration |
|---|---|---|---|
theme | localStorage | Your chosen colour scheme (dark or light). Read on page load to prevent a flash of the wrong theme. | Persistent until cleared |
6. Consent storage
We store your cookie consent choice in local storage so we do not show the banner again on every visit.
| Storage key | Type | Purpose | Duration |
|---|---|---|---|
yoria:cookie-consent | localStorage | JSON object recording your consent preferences: which cookie categories you accepted or rejected, and when you made that choice. Contains no personal data. | Persistent until cleared |
You can change your cookie preferences at any time by clicking the cookie icon in the page footer or clearing this key from your browser's local storage.
7. Analytics
Yoria uses Cloudflare Web Analytics, which is a cookieless, privacy-first analytics service. It does not set any cookies, does not use local storage, and does not track individual users. It collects only aggregate, anonymised page-view and performance data (page URL, referrer, country, device type, browser).
Cloudflare Web Analytics does not:
- Set any cookies or use fingerprinting
- Track users across sites
- Collect IP addresses (data is aggregated at the edge)
- Sell or share data with advertisers
Because Cloudflare Web Analytics is cookieless, it does not require consent under most privacy regulations. We include it in our cookie consent banner for full transparency.
We do not use Google Analytics, Facebook Pixel, or any other tracking-based analytics service.
8. Third-party cookies
Some cookies on the Yoria platform are set by third-party services that we use to provide the Service. These third parties have their own privacy policies.
| Third party | Purpose | Cookies | Privacy policy |
|---|---|---|---|
| Paddle.com Market Limited | Payment processing. Paddle may set cookies when you interact with the checkout form to prevent fraud and complete payment. | Set only during checkout flow — not on general pages. | paddle.com/privacy |
| Google Fonts | Web font delivery (DM Sans, Space Grotesk, DM Mono). Google may log the request for font files. | Google states that Google Fonts does not set cookies. Request logs are retained separately. | Google Privacy Policy |
| Cloudflare | CDN, DDoS protection, bot management (Turnstile), and cookieless web analytics. Yoria is deployed on Cloudflare Pages. | cf_clearance (Turnstile challenge); __cf_bm (bot management, if triggered by Cloudflare's automated systems). | Cloudflare Privacy Policy |
9. No advertising cookies
Yoria does not use advertising cookies, remarketing pixels, conversion tracking, or any technology designed to show you targeted advertisements on third-party websites.
We do not sell or share data with advertising networks, data brokers, or any third party for advertising purposes.
10. Managing cookies
Cookie consent banner
When you first visit Yoria, a cookie consent banner appears. You can:
- Accept All — enables all cookie categories
- Reject All — enables only essential cookies
- Manage Preferences — choose per category
You can reopen the cookie preferences modal at any time by clicking the cookie icon in the page footer.
Browser settings
Most browsers let you control cookies through their settings. You can view, delete, or block cookies. Note that disabling essential cookies will prevent you from logging in to Yoria.
Local storage
To clear local storage items (theme, yoria:cookie-consent), open your browser's Developer Tools (usually F12), navigate to the Application or Storage tab, and delete entries under Local Storage for yoria.io.
11. Contact us
If you have questions about our use of cookies, contact:
- Email: [email protected]
- Subject: Cookie Policy Enquiry
For general privacy matters, see our Privacy Policy.