Cookies Policy | EGO HERO

Overview

This Cookies Policy explains exactly what cookies and similar storage technologies (localStorage, sessionStorage) egohero.com uses, what each one does, and how to control them. It supplements our Privacy Policy.

1. What we mean by “cookies”

We use the word “cookies” loosely throughout this site to mean both HTTP cookies (small files set by your browser) and similar browser-storage mechanisms (localStorage and sessionStorage). The data-protection rules and consent requirements treat these similarly, so we list them together below.

On your first visit, we show a consent banner. Nothing optional runs until you choose. You have three options:

Choice	What happens
Accept all	All categories enabled (currently: strictly necessary, analytics).
Reject optional	Only strictly necessary storage runs.
Customise	Toggle each category individually in the Cookie settings modal.

You can change your choice at any time by clicking “Cookie settings” in the footer. Withdrawal takes effect immediately and we instruct any disabled service to stop tracking.

3. The full inventory

3.1 Strictly necessary (always on, no consent required)

These are required for the site to function. They cannot be disabled.

Name	Type	Purpose	Set by	Lifetime
`egohero:consent:v1`	localStorage	Records the choices you make in the Cookie settings, plus the policy version and timestamp. Without this we’d have to ask you again on every page.	EGO HERO	Persistent until you clear browser storage or click “Reset”.
`sb-<project>-auth-token`	localStorage	Your sign-in session token. Only set when you are signed in.	Supabase	About 1 hour for the access token; refresh token is rotated periodically.
`auth:return-to`	sessionStorage	Remembers where you were going so we can send you back after sign-in. Removed automatically.	EGO HERO	Until tab close or successful sign-in.

3.2 Analytics (only with your consent)

If you opt in to analytics, Google Analytics 4 sets the following first-party cookies. We have configured GA4 with IP-anonymisation and ad-personalisation disabled. We do not use GA Audiences for advertising.

Name	Type	Purpose	Set by	Lifetime
`_ga`	Cookie	Distinguishes unique browsers (a pseudonymous client ID).	Google Analytics 4	Up to 2 years.
`_ga_PLL4NY6KEH`	Cookie	Stores the GA4 session state for our property.	Google Analytics 4	Up to 2 years.

If you withdraw analytics consent later, we set the GA opt-out flag for our property and clear the cookies above on your next page load.

3.3 Functional / Marketing

We do not currently use any functional or marketing cookies. We list these categories in our settings UI for transparency and so the framework is in place if we ever change that. Any future addition will require fresh consent — the consent record is versioned (policyVersion) and a material change forces the banner to reappear.

4. Third-party cookies

The Service does not embed any social-media widgets, ad networks, or trackers that would set additional third-party cookies on its own. The third-party requests that do occur are:

When	Provider	What is sent
Every page load (consent-independent — needed for the site to look correct)	Google Fonts	A request for the Plus Jakarta Sans webfont CSS and font files. Google receives request metadata (IP, user-agent). Google states it does not set cookies on the Fonts API.
When you sign in	Supabase / Google OAuth	Request to authenticate your sign-in. Google sets its own session cookies on its own domain (accounts.google.com).
When you open an audio/video/RAW/SQLite/PDF/OCR/Parquet tool	unpkg / jsDelivr	A request for the WebAssembly file the tool needs. The CDN receives request metadata. These are static-asset CDNs; they do not set tracking cookies.

5. How to control cookies

You have several layers of control:

Layer	What it does
This site — Cookie settings	Click “Cookie settings” in the footer to change your category choices. Takes effect immediately.
Your browser	Every browser lets you block cookies, delete them, or browse in private mode. See the help pages for Chrome, Firefox, Safari, or Edge.
Global Privacy Control	If your browser sends a verified GPC signal we treat it as a request to opt out of analytics for that session.
GA opt-out	You can install Google’s Analytics Opt-out Browser Add-on to disable GA across all sites.

6. Changes

If we add a new cookie or storage key, or change the purpose of an existing one in a material way, we will update this page, bump the consent record version, and prompt you to consent again. Minor edits (clarifications, typo fixes) update the “Effective date” only.

7. Contact

Questions about cookies? Email hello@egohero.com.