Table of contents
2. Strictly Necessary Cookies
These cookies are required for the platform to function. They cannot be disabled without breaking core features. No consent is needed for these cookies under applicable law.
| Name / Key | Purpose | Type | Duration |
|---|---|---|---|
| sb-*-auth-token | Supabase authentication session. Contains a signed JWT with your user ID and active organization ID. Used to authenticate every request to the platform. | Cookie | Session / 7 days |
| sb-*-auth-token-code-verifier | PKCE code verifier used during the authentication flow. Ensures the integrity of the OAuth/PKCE exchange. | Cookie | Session |
3. Functional Storage
These entries store your preferences and UI state to provide a consistent experience across sessions. They remain on your device until you clear your browser data.
| Name / Key | Purpose | Type | Duration |
|---|---|---|---|
| nara-timer-store | Persists the active timer state (running task, elapsed time, start timestamp) so the timer survives page refreshes and browser restarts. Managed by Zustand persist middleware. | localStorage | Persistent |
| theme | Stores your color theme preference (dark or light). Set by next-themes. | localStorage | Persistent |
| sidebar-collapsed | Remembers whether the application sidebar is expanded or collapsed. | localStorage | Persistent |
4. Analytics Cookies
We may use analytics services to understand how visitors interact with the NARA marketing website and to measure the performance of the application. If enabled, these cookies collect anonymized usage data.
| Provider | Purpose | Duration |
|---|---|---|
| Vercel Analytics | Privacy-friendly, cookieless web analytics. Measures page views and performance metrics without setting cookies on your device. No personal data is collected. | N/A (cookieless) |
As of the effective date of this policy, we do not use any advertising or tracking cookies. If this changes, we will update this policy and request your consent where required.
5. Third-Party Cookies
The following third parties may set cookies or access data on your device as part of providing their services to us:
- Supabase— Sets authentication cookies (see Section 2) to manage your login session. Supabase processes these cookies solely to provide authentication services.
We do not allow any third party to use cookies set through the NARA platform for their own advertising or tracking purposes.
6. Managing Your Cookies
You can control and manage cookies through your browser settings. Most browsers allow you to:
- View what cookies are stored and delete them individually
- Block cookies from specific or all websites
- Block third-party cookies while allowing first-party cookies
- Clear all cookies when you close the browser
To clear localStorage and sessionStorage data, use your browser's developer tools (usually accessible via F12 → Application → Storage) or clear all site data in your browser settings.
Note: Disabling or deleting essential cookies will prevent you from logging into the NARA platform. Deleting the timer-store entry will reset any running timer.
7. Cookie Lifetimes
Cookies and storage entries used by NARA fall into two categories:
- Session— Deleted when you close your browser. Used for temporary authentication state during the login flow.
- Persistent— Remain on your device until they expire or you delete them manually. Authentication cookies expire after 7 days (requiring re-login). localStorage entries persist until cleared.
8. Changes to This Policy
We may update this Cookie Policy to reflect changes in the cookies we use or for operational, legal, or regulatory reasons. We will post the revised policy on this page with an updated date. Material changes will be communicated via email or an in-app notice.
9. Contact
If you have questions about our use of cookies, contact us at:
- Email: privacy@nara.app
- Company: Heka Services Inc.
- Address: Montreal, QC, Canada
If you have any questions about this document, please contact us at privacy@nara.app or visit our contact page.