Cookie Policy

Last updated: May 2026

Authentication Cookies

Artaway uses Supabase for authentication, which sets session cookies in your browser to keep you logged in. These are essential cookies required for the platform to function — without them, you would need to log in again on every page visit. These cookies contain only your session token and do not track your activity across other websites.

Local Storage

In addition to cookies, Artaway stores small amounts of data in your browser's local storage to improve your experience. This includes: notification badge timestamps (so we know which notifications you have already seen), rate limiting counters (to prevent accidental duplicate actions), admin display preferences, and dashboard tab state. This data stays in your browser and is not sent to our servers.

Security Tokens

During signup, Cloudflare Turnstile generates a temporary security token to verify you are human. This token is short-lived and used solely for anti-fraud purposes. It does not persist after the verification is complete.

Product Analytics

Artaway uses PostHog, a privacy-focused analytics tool, to understand which pages get visited and how features are used. PostHog stores a small cookie to recognize repeat visitors. We have configured it to mask all form inputs by default — we never see the text you type in fields like your bio, messages, or login forms. We honor your browser's "Do Not Track" preference. Session replay (a recording of how a user navigates the site) is OFF by default; we only enable it for individual users when we are actively troubleshooting an issue they have reported.

Managing Cookies

You can manage cookies through your browser settings. Disabling essential authentication cookies will prevent you from staying logged in. Disabling analytics cookies has no effect on the features you can use.

Questions? Contact us at hello@artaway.org.