Cookie Policy
Last updated 2026-05-18.
This page explains the cookies and similar technologies Pappus uses, what they do, and how you can change your choices. It is consistent with the ePrivacy Directive (and the UK Privacy and Electronic Communications Regulations, "PECR") and complements the Privacy Policy.
What are cookies?
Cookies are small files placed on your device by the websites you visit. They let the site remember things across page loads — for example, that you are signed in. We also use similar technologies (localStorage, sessionStorage) that we group together with cookies in this policy for clarity.
Categories we use
Strictly necessary
These cookies are required for the Service to function and cannot be turned off. They include the authentication session token (Supabase) and a CSRF token. Under PECR these are exempt from prior consent because they are essential to deliver the service you requested.
Functional
These remember your preferences — theme, last-viewed route, dismissed banners. They are set when you use the app. We treat them as part of the strictly-necessary bundle because they exist only to honour preferences you set inside the app.
Analytics (opt-in)
If you accept analytics in the banner, we load PostHog to understand which features get used and where people get stuck. Autocapture is disabled — we only send the named activation events listed in our Privacy Policy. PostHog stores a person-id cookie in the first-party domain.
Error reporting (opt-in)
If you accept error reporting in the banner, we load Sentry to capture JavaScript crashes so we can fix them. Sentry stores a session-correlation cookie. Personally identifying information (email, content body) is scrubbed before send by our reporter shim.
Your current choices
You have not yet recorded a cookie preference.
Do Not Track
We respect the browser-level "Global Privacy Control" signal as a request to disable analytics and error reporting, equivalent to choosing "Necessary only" in the banner.
Changes
If we add a new cookie category we will re-prompt you for consent before loading it. The banner uses the storage keycookie_consent_v1; a version bump triggers a re-prompt.
Contact
Cookie questions: support@pappus.tech.