Cookie Policy — GSTArk

1. Cookies we use

Only the Supabase sign-in cookies:

sb-fuubmkntzdysubwefqdp-auth-token

may be split into parts ending .0, .1 and so on

Keeps you signed in. Set by our sign-in provider, Supabase.

Up to 400 days, renewed while you use GSTArk; removed when you sign out.

sb-fuubmkntzdysubwefqdp-auth-token-code-verifier

short-lived

A one-time security code used while you sign in with Google (or reset a password), so the sign-in cannot be taken over.

Removed as soon as the sign-in completes.

There are no analytics, advertising or third-party tracking cookies. If you choose Sign in with Google, Google's own sign-in page is run by Google under Google's policies.

2. Browser storage for app settings

These are kept in your browser, not sent to us as cookies. This is every browser storage key the app uses:

gstark_cookie_notice

localStorage

Remembers that you have seen the cookie notice, and your choice in Manage preferences (Essential on, Analytics off).

Until you clear your browser storage.

decision_board_enabled

localStorage

An app setting: if it is present and set to true, the Decision Board panel is shown. GSTArk reads it; it is not set automatically.

Until you clear your browser storage.

gstark_generated_output_<draft or case id>

sessionStorage

Carries the draft you just generated from the workspace to the output page in the same tab. The draft is also saved to your account on our servers.

Cleared when you close the tab.

gstark:envelope:<id>

sessionStorage

Carries a case hand-over between benches in the same tab (case id, bench, task, side and document role; no document text).

Cleared when you close the tab.

Older versions of the login page stored gstark_trial_active and gstark_trial_start; the current app does not use them. Your work is saved on our servers, not in cookies.

3. Fonts

Our pages load their fonts (Fraunces, DM Sans and JetBrains Mono) from Google Fonts, so your browser asks Google's font servers for them. GSTArk sets no cookie for this.

4. The cookie notice and your choices

Cookies and storage that are strictly needed to run the service need no consent, so we do not ask for any. We show a one-time notice so you know what we use; once you press OK it does not appear again on that browser.

In Manage preferences, Essential is always on. Under Analytics: we count website visits with Vercel Web Analytics (pages viewed, country, device type and referring site). It sets no cookies and stores nothing in your browser, keeps no IP address and does not identify you, so there is nothing to switch on or off. If we ever add an analytics tool that uses cookies or identifies visitors, it will stay off until you switch it on.

5. Blocking cookies

You can block or delete cookies in your browser settings. If you block the sign-in cookies, you cannot sign in to GSTArk. The public pages still work.

6. More

How we handle personal data: Privacy Policy. Questions: founder@gstark.ai.

Changes to this policy will be shown on this page with a new “Last updated” date.