Cookie Policy

This policy was written by inspecting what the application actually sets, not from a template. At the time of writing Shimpilot uses essential authentication cookies only.

Authentication and session cookies. Set by our authentication provider (Supabase Auth) to keep you signed in across requests and to refresh your session. Without them you cannot stay authenticated, so they are strictly necessary to provide the service you asked for.

These are set on Shimpilot's own domain, are read server-side on each request, and are cleared when you sign out.

• No analytics cookies. No analytics library is installed in the application.
• No advertising or marketing cookies.
• No cross-site tracking or third-party profiling cookies.
• No embedded third-party content that sets cookies on our public pages.

Consent banners exist to obtain permission for non-essential cookies. Shimpilot does not set any, so there is nothing to consent to and a banner would be a misleading ritual rather than a meaningful choice.

If we later introduce analytics or any non-essential cookie, we will update this policy and add a genuine consent mechanism before doing so.

You can block or clear cookies in your browser settings. Blocking Shimpilot's authentication cookies will prevent you from signing in, since they are what carries your session.

Changes to this policy will be reflected in the "Last updated" date at the top of this page.

Questions: privacy@shimpilot.com.