Draft, attorney review pending. This notice describes our current practices accurately to the best of our knowledge and will be replaced with attorney-reviewed language before general commercial release.
Cookie Policy
Last updated: September 3, 2026
This policy describes the cookies and similar browser storage (such as localStorage) that Apograph uses.
What we use
| Name | Type | Purpose | Set by | Duration |
|---|---|---|---|---|
| sb-*-auth-token (Supabase Auth) | Strictly necessary | Keeps you signed in to the invite-only desk | Genstrata (Supabase Auth) | Session / configured auth lifetime |
| apograph-oauth-next | Strictly necessary | Carries the post-login destination through Google OAuth | Genstrata | 10 minutes |
| theme (localStorage) | Functional | Remembers light or dark theme | Genstrata (next-themes) | Until cleared |
What we do not use
We do not use advertising cookies, analytics cookies, third-party advertising trackers, or cross-site profiling. The public site and desk do not load Vercel Analytics, Speed Insights, or Sentry.
Third-party sign-in
If you sign in with Google, Google sets its own cookies on Google's domains during the sign-in flow under Google's privacy policy. We receive only your account email and name.
Managing cookies
You can block or clear cookies and site data in your browser settings. Blocking strictly necessary cookies will prevent sign-in.
Contact
Genstrata, Inc., a Delaware corporation.
Legal: legal@genstrata.com. Privacy: privacy@genstrata.com. Security: security@genstrata.com. General: info@genstrata.com.
Postal address for service of process: write legal@genstrata.com for the current Delaware registered-agent street address on file with the Division of Corporations.