Legal
Cookie Policy
Effective: 2026-10-11
What is a cookie?
A small piece of data stored in your browser to remember preferences and sessions.
Cookies we use
| Cookie | Purpose | Duration |
|---|---|---|
sb-…-auth-token (sometimes split into .0, .1) | Keeps you signed in. Set by Supabase, our sign-in provider. Holds a sign-in token that renews itself every hour. During Google sign-in or a password reset, a short-lived sb-…-auth-token-code-verifier cookie is set as well. | Up to 400 days, or until you sign out |
trove_share_… | Lets you open a shared view someone sent you. Sent only to that share's pages. | Until the share expires |
_ga, _ga_* | Google Analytics visit counting. Optional: set only on the public website, and only after you accept. | 2 years |
Your theme choice, your in-app preferences, your answer to the analytics banner and anything you type into the money map live in localStorage, not cookies, so they never travel with a request.
Cloudflare, which serves the site, may set its own short-lived security cookie (such as __cf_bm) when it checks traffic for bots. Trove does not read it.
Managing cookies
The sign-in cookie and the shared-view cookie above are essential. Without the first you can't stay signed in. The Google Analytics cookies are optional: the banner on the public website asks first, nothing is sent to Google before you accept, and Google Analytics never runs in the signed-in app. Cloudflare Web Analytics counts page views without cookies. A browser sending Global Privacy Control counts as a refusal. Rejecting removes any _ga cookies already set. What is and isn't measured is spelled out at Settings → Privacy.
Vroe Labs is not yet a registered company. Trove is being built and is not yet in testing. Full legal details will be published before launch.