Legal
Cookie Policy
Last updated 29 July 2026
A cookie is a small text file a website places in your browser. This page lists every cookie we set and explains what each one is for. If anything here doesn't match your experience, email hello@leak-studio.com.
1. Our approach
We only use cookies that are strictly necessary. We do not currently run:
- Google Analytics or any other website analytics platform
- Meta Pixel, Google Ads tags, LinkedIn Insight Tag, or similar
- Third-party advertising or retargeting cookies
- Social-media tracking pixels
Because everything we set is strictly necessary under PECR Regulation 6(4), we don't need to ask for your consent before setting them. We do still show a short first-visit notice so you know what to expect.
2. Cookies we set
Strictly necessary
| Name | Set by | Purpose | Expiry |
|---|---|---|---|
sb-*-auth-token | Supabase (via leak-studio.com) | Keeps admin users signed in to the admin panel. Only set for admin sessions — not for public visitors. | Session (up to 1 hour, then rotated) |
leak_cookie_notice | leak-studio.com | Remembers that you've seen the cookie notice so we don't show it every visit. | 12 months |
Analytics / marketing
None currently in use.
If we ever add analytics or advertising cookies, we will:
- Update this page with the specific cookies and providers
- Present a consent banner asking you to opt in before any non-essential cookie is set
- Give you an easy way to withdraw consent at any time
3. Local storage and similar technologies
We do not use localStorage, sessionStorage, or IndexedDB to store personal data or tracking identifiers on your device.
The Leak Calculator on the homepage keeps your inputs in memory only — they are lost when you close the tab, unless you submit the audit form.
4. Server logs
Separately from cookies, our hosting provider (Vercel) automatically records basic request information (URL, timestamp, response code, approximate location, IP address) for up to 30 days. This is used for debugging and abuse prevention. See our Privacy Policy for more.
5. How to control cookies in your browser
Every modern browser lets you view, block, or delete cookies. Because we only set strictly necessary cookies, blocking them will sign admin users out but won't affect public visitors browsing the site.
6. Changes
We'll update this page whenever we add or remove a cookie. The "last updated" date at the top reflects the most recent change.
Related: Privacy Policy · Terms of Service