1. In short
Stable uses only the cookies and browser storage needed to sign you in and remember your settings. Analytics run without cookies unless you agree to them, and we use no advertising cookies.
2. Necessary
- Sign-in session cookies from our authentication provider (Supabase), so you stay signed in securely. Removed when you sign out or they expire.
- Your light or dark theme, and whether you've dismissed an announcement, kept in your browser's storage.
- Security: our hosting provider (Vercel) may set short-lived cookies to protect the site from abuse.
These can't be switched off without breaking sign-in.
3. Analytics
PostHog and, where enabled, Google Analytics measure how the site is used. Until you consent, both run without cookies: PostHog keeps its state in memory for the visit, and Google Analytics runs in consent mode, sending cookieless measurements. Stable doesn't ask for analytics consent today, so for every visitor they run without cookies. If we ever offer the choice to accept analytics cookies, we'll explain it here first, and you'll be able to withdraw it at any time.
4. Third-party pages
Checkout and the billing portal are hosted by Stripe and set Stripe's own cookies, needed for payment and fraud prevention, under Stripe's policies.
5. Your control
You can block or delete cookies in your browser settings; blocking necessary cookies will stop sign-in working. Questions: see our Privacy Policy.