← All legal documents

Cookie Policy

Version 2026-05-10 · Effective 2026-05-10

⚠ Draft — not yet reviewed by counsel

This document was generated by AI as a starting point tailored to the Arbor codebase and operating model. It has not been reviewed by a licensed attorney. Do not rely on it for binding legal effect until a qualified lawyer has reviewed and approved it. Acceptance recorded against this version will need to be re-collected when counsel-approved language replaces this draft.

This Cookie Policy explains how Arbor uses cookies and similar technologies (such as localStorage entries) on the Service. It supplements our Privacy Policy.

1. What are cookies?

Cookies are small text files placed on your device when you visit a website. They are used to remember your preferences, keep you signed in, and (with your consent) measure how the Service is used. Some cookies are set by us ("first-party") and some by third parties whose services we embed ("third-party").

2. The cookies we use

2.1 Strictly necessary

Required to make the Service work — you cannot opt out of these.

  • sb-*: Supabase authentication session cookies. Identifies your signed-in session.
  • arbor.activeOrgId: which organization you're currently operating in (used to scope every page).
  • arbor.cookie-consent: stores your consent choices so we don't prompt you on every page load.

2.2 Functional

Remember your UI preferences (dark mode, sidebar state). Set on first interaction.

2.3 Analytics

Used only with your consent. Currently we do not use any third-party analytics provider; if we add one (e.g. PostHog, Plausible) we will update this policy and re-prompt for consent.

2.4 Marketing / advertising

We do not use marketing or advertising cookies.

3. Managing your cookie choices

On your first visit you'll see a cookie banner letting you accept all, reject all non-essential, or customize your choices. You can revisit your choices at any time by clicking Cookie preferencesin the page footer. You can also clear or block cookies via your browser's settings; doing so for strictly-necessary cookies will prevent the Service from functioning.

4. Do Not Track

Some browsers send a Do Not Track (DNT) signal. We currently do not use any cross-site tracking that DNT would affect, but we honor consent withdrawal via the cookie banner regardless of browser DNT state.

5. Changes

Material changes will be announced via the cookie banner re-appearing. Last updated 2026-05-10.

6. Contact

Questions: privacy@arbor.app.