Cookie Policy
Last updated 13 October 2026
This Cookie Policy explains how cookies and similar technologies are used on AdTruffle (the “Service”).
It should be read together with the Privacy Policy.
1. What are cookies and similar technologies?
Cookies are small text files stored on your device when you visit a website. Similar technologies include local storage, pixels, and software development kits (SDKs) that store or read identifiers on your device or browser.
2. How we use them
We use cookies and similar technologies to:
- Make the Service work (authentication, security, session continuity)
- Remember preferences where needed
- Remember the campaign link that brought you to a signup
- Measure performance and usage with analytics, which run until you reject them
Strictly necessary cookies keep the Service working. Analytics (Vercel Analytics and Vercel Speed Insights) load and run by default. They stop only if you reject them. If you never choose, they keep running.
3. Categories we use
3.1 Strictly necessary
These are required for the Service to function. We currently set:
- Supabase authentication cookies (names beginning with sb-) so you can sign in and stay signed in
- adtruffle-reset — a short-lived, httpOnly cookie set only while a password-reset email is outstanding (about one hour), so the link can open the reset page
- adtruffle_feed_view and adtruffle_saved_view — your last feed and saved-library filters, kept for about 30 days
- adtruffle_cookie_consent — your accept or reject choice for analytics, kept for about six months
- Theme — not a cookie. Light or dark is stored in the browser’s local storage as adtruffle-theme
You cannot opt out of strictly necessary cookies if you wish to use the Service, but you can block cookies in your browser (which may break login and core features).
3.2 Analytics and performance
We currently use:
- Vercel Analytics — aggregated traffic and usage insights
- Vercel Speed Insights — performance / Core Web Vitals style metrics
These tools load and run on a visit unless this browser has rejected them. Rejecting stores adtruffle_cookie_consent=rejected and they are not loaded on later visits while that choice stands. Accepting stores accepted and they stay on. If you never press the banner, analytics keep running.
3.3 Referral
at_ref: set when you open an ad a member shared, and, once you accept cookies on the home page, when you open their link to this site. It holds that member’s referral code, the ad, the time and a signature, so that signing up or subscribing within 30 days counts toward them. It is httpOnly, kept for 30 days and overwritten by the next shared link you open. Rejecting cookies removes it, and it is not set again while that choice stands. Visits are counted without cookies.
3.4 First visit
at_attr: set on your first visit to a marketing page, such as the home page, signup, a shared ad, or any page opened with campaign parameters. It stores utm_source, utm_medium, utm_campaign, utm_content and utm_term from that link, the site that referred you, and the path you landed on. The cookie is httpOnly and lasts 90 days. A later visit does not replace it. When you create an account we save those values on your profile, and when you subscribe we send them to Stripe with the checkout. Rejecting analytics does not remove this cookie. It is part of running the Service.
We do not currently use advertising cookies or third-party ad networks on the Service. If that changes, we will update this Policy and request consent where required.
4. Your choices
The first time you visit the home page, a banner offers Accept or Reject. Non-essential cookies are already in use. Accept keeps them on and dismisses the banner. Reject turns them off for this browser. You change that choice at the bottom of this page — there is no separate cookie-settings link in the footer.
Reject does not remove the first-visit cookie described above.
Browser settings also let you block or delete cookies. Blocking all cookies may prevent sign-in and other core features. Clearing cookies removes a stored Reject, and analytics run again until you reject them.
5. Retention
Cookie lifetimes vary:
- Session cookies typically expire when you close your browser
- Persistent cookies remain for a defined period or until deleted
- Consent records are kept long enough to honour and evidence your choice
Exact durations depend on the tool and technical implementation. Analytics providers may set their own identifiers while analytics are running.
6. Processors involved in cookies / similar tech
- Vercel — hosting, and Analytics and Speed Insights unless you have rejected them
- Supabase — authentication/session infrastructure that may rely on necessary cookies or storage
- Other processors listed in our Privacy Policy may set strictly necessary cookies or local storage as part of providing the Service
7. International transfers
Some providers may process data outside the UK. See the international transfers section of our Privacy Policy.
8. Updates
We may update this Cookie Policy when our tools or practices change. The “Last updated” date at the top will reflect the latest revision.
9. Contact
Questions about cookies or this Policy: support@adtruffle.com.
Related documents
Your cookie choice
Checking this browser…
We use cookies to run AdTruffle and remember your preferences. You can change that here.