Legal
Cookies policy.
This page is maintained by Surplus to explain how and why we use cookies and similar technologies. It is app-owned content and should be reviewed regularly as tooling and regulations change.
Last updated: 18 July 2026.
What are cookies?
Cookies are small text files placed on your device when you visit a website. They store information about your preferences, session, or browsing behaviour. We also use similar technologies such as local storage, session storage, and pixels where they serve the same purpose.
What we use
We keep our cookie use minimal. Below is a summary of the categories of cookies and similar technologies you may encounter on this site. Only the first category is strictly necessary; the others are optional and require your consent under EU law.
Strictly necessary
Always active- Purpose
- Required for the site to work — authentication, session state, security, and load balancing. These cannot be switched off without breaking the service.
- Examples
- Session tokens, CSRF tokens, auth state.
- Duration
- Session to 30 days.
Functional
Consent required- Purpose
- Remember choices you make so the experience fits your workspace — language, region, accessibility preferences, and feature flags.
- Examples
- Region selection, theme preferences.
- Duration
- Up to 1 year.
Analytics & performance
Consent required- Purpose
- Help us understand how visitors use the site so we can improve it. We use privacy-first tools where possible and do not sell this data.
- Examples
- Page views, error rates, feature usage.
- Duration
- Up to 13 months.
Marketing
Consent required- Purpose
- Used to measure the effectiveness of our campaigns and to limit repetitive messages. We do not run third-party ad networks on the site.
- Examples
- Campaign referrer, conversion tracking.
- Duration
- Up to 90 days.
Third-party services
Some parts of the site rely on trusted sub-processors. Each has its own cookie and privacy policy. We list them here so you can review their practices.
| Service | Why we use it | Privacy policy |
|---|---|---|
| Cloudflare | Security and CDN performance. | www.cloudflare.com/privacypolicy/ |
| Supabase | Authentication and backend data services. | supabase.com/privacy |
| PostHog / Plausible (privacy-first analytics) | Product analytics and usage patterns. | posthog.com/privacy |
Managing your preferences
You can update your cookie choices at any time via the cookie banner or your browser settings. Withdrawing consent does not remove cookies that were set previously, but it stops new optional cookies from being placed. You can also clear existing cookies from your browser.
aboutcookies.org and youronlinechoices.eu provide independent guidance on how to manage cookies across major browsers.
Changes to this policy
We may update this page as our tools or legal obligations change. The latest version will always be available here, and we will update the effective date when material changes are made.
Contact us
If you have questions about cookies or your data, please email privacy@withsurplus.com.