Cookie policy.

1What cookies are

Cookies are small text files stored on your device by websites you visit. Similar technologies — localStorage, sessionStorage, and HTTP-only tokens — do comparable jobs. This policy covers all of them together; for simplicity we call them all "cookies".

2What we use, today

Only essential cookies. Nothing for cross-site tracking, behavioural advertising, or third-party marketing.

2.1 Authentication

• Session tokens — set when you sign in via our Convex Auth provider. Used to keep you logged in between requests. Expire when you sign out or after 30 days of inactivity
• CSRF protection — protects against cross-site-request-forgery attacks when you submit forms

2.2 Preferences

• gws_cookie_consent — stored in localStorage. Records whether you've dismissed the cookie banner so it doesn't re-appear. Only the banner reads this

2.3 Operational

• Server access logs — Vercel and Convex log IP address, user-agent, and request path for a short retention window (typically 30 days) as part of their standard operations, used for security and troubleshooting

3What we don't use, today

• Google Analytics, Meta Pixel, or any third-party tag
• Behavioural advertising cookies
• Social media tracking cookies
• Cross-site tracking of any kind

If and when we add analytics or marketing-oriented tracking (roadmap: Phase 7 / Analytics + SEO), the cookie banner will gate their loading behind explicit consent and this policy will be updated.

4Third-party cookies on embedded content

During a checkout flow, the Paystack payment popup is loaded from js.paystack.co. Paystack sets its own cookies as part of delivering the payment experience — governed by Paystack's privacy policy, not ours. These cookies are only active while the popup is open and are not shared with us.

5Managing cookies

You can control cookies at several levels:

• Our cookie banner — choose "Essential only" to skip anything non-essential (no functional difference today, since we only use essentials)
• Your browser— most browsers let you view, delete, or block cookies. Check your browser's help documentation under "cookies" or "site data"
• Dashboard sign-out — signing out clears the authentication session cookies

Blocking essential cookies will break parts of the service — you won't be able to stay signed in, for example.

6Changes to this policy

We'll update this page when our cookie footprint changes. The date at the top reflects the last substantive revision. For anything unclear, email privacy@globalweb.studio.