Last updated: September 2026
This describes the cookies TC Companion actually sets today, not a generic list of categories that might apply to a typical website. It is not a substitute for legal advice.
1. What a Cookie Is
A cookie is a small piece of text a website stores in your browser so it can recognise you on a later visit, for example to keep you signed in.
2. Strictly Necessary: Staying Signed In
TC Companion sets one session cookie from Supabase, the service that runs our sign-in system. It stores an encrypted token that proves you're logged in, nothing else, and never requires your consent under UK cookie rules.
| Cookie | Purpose | Type | Expiry |
|---|---|---|---|
| sb-*-auth-token | Keeps you signed in between visits | Strictly necessary, first-party | Session / until you log out |
| maintenance_bypass | Lets a visitor past our pre-launch access gate without re-entering the link each visit | Strictly necessary, first-party | Up to 30 days |
3. Not Necessary, Only With Your Consent: Product Analytics
We use PostHog to understand how people actually move through the product -- which pages get used, where the pricing/purchase journey drops off, that kind of thing -- so we can fix real problems instead of guessing. This is not strictly necessary, so nothing loads and no cookie is set until you actively accept the banner shown on your first visit. Declining, or simply not responding, means it stays off. We don't use advertising cookies, cross-site tracking, or third-party marketing pixels of any kind.
| Cookie | Purpose | Type | Expiry |
|---|---|---|---|
| ph_*_posthog | Recognises you across pages for product analytics | Not necessary, first-party, consent-gated | Up to 1 year, or until you decline |
If you buy anything, Stripe's own checkout page may set its own cookies while you're on it, governed by Stripe's own privacy policy, not this one. We don't control what happens on that page.
4. Why You See a Banner
UK cookie rules (the Privacy and Electronic Communications Regulations) require consent BEFORE a non-essential cookie like our analytics one is set, not an after-the-fact opt-out. That's why the banner asks first, and why nothing analytics-related runs until you accept it.
5. Managing Cookies
You can block or delete cookies through your browser's settings at any time. Since our one cookie is what keeps you logged in, deleting it will simply log you out; you can sign back in whenever you like.
6. Changes to This Policy
If we ever add a new cookie, this page will be updated to name it honestly, the same way the rest of this policy already tries to.
7. Contact
Questions about cookies: hello@tccompanion.example.com, or see our Privacy Policy for how we handle data more broadly.