1. What are cookies
Cookies are small text files stored on your device by your browser when you visit a website. Similar technologies include local storage, session storage, and pixels. This policy covers all such technologies (collectively “cookies”).
2. Who sets cookies
Cookies on SkyLog are set by:
- TEGRALAB (first-party cookies) — for authentication, security, and basic functionality
- Third-party service providers listed below — subject to their own cookie policies
3. Cookies we use
3.1 Strictly necessary cookies
These cookies are essential for the Service to function. They cannot be disabled.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
sb-access-token | Supabase | Authenticates your session | Session |
sb-refresh-token | Supabase | Refreshes your authentication | 60 days |
__Host-next-auth.* | Next.js | CSRF protection | Session |
Legal basis: Article 6(1)(b) GDPR (necessary for contract performance); no consent required under the ePrivacy Directive for strictly necessary cookies.
3.2 Functional cookies
These cookies remember your preferences and improve your experience.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
skylog_sidebar_state | TEGRALAB | Remembers whether the sidebar is collapsed | 1 year |
skylog_view_pref | TEGRALAB | Remembers table vs map view preference | 1 year |
Legal basis: Article 6(1)(f) GDPR — legitimate interest in providing a consistent user experience. You may disable these by clearing your browser cookies; functionality will not be affected.
3.3 Analytics cookies
We use Google Analytics to understand how the Service is used and to improve it. IP addresses are anonymised and no personal identifiers are passed to the analytics provider.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google LLC | Distinguishes unique users | 2 years |
_ga_* | Google LLC | Persists session state for Google Analytics 4 | 2 years |
Legal basis: For visitors in the EEA, the UK, and Switzerland, Article 6(1)(a) GDPR — your consent; these cookies are set only if you accept them via our cookie banner. For visitors elsewhere, they may be set by default (see “Regional handling” in Section 5.1), and you can opt out at any time via “Cookie settings.” Google’s privacy information is available at policies.google.com/privacy.
3.4 Product-experience analytics cookies
We use PostHog to understand how visitors interact with our pages — such as which features are used and where people encounter friction — so we can improve the usability of the Service. This data is analysed in aggregate.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
ph_*_posthog | PostHog, Inc. | Distinguishes sessions and visitors for product analytics (which features are used, where sign-up drops off) | 12 months |
Legal basis: For visitors in the EEA, the UK, and Switzerland, Article 6(1)(a) GDPR — your consent; these cookies are set only if you accept them via our cookie banner. For visitors elsewhere, they may be set by default (see “Regional handling” in Section 5.1), and you can opt out at any time via “Cookie settings.” PostHog’s privacy information is available at posthog.com/privacy.
3.5 Payment cookies
When you access billing or payment features, Stripe may set cookies for fraud prevention and session management.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
__stripe_mid | Stripe, Inc. | Fraud detection | 1 year |
__stripe_sid | Stripe, Inc. | Fraud detection | 30 minutes |
Stripe’s cookie policy: stripe.com/cookies-policy/legal
Legal basis: Article 6(1)(b) GDPR (necessary for payment processing).
4. Cookies we do not use
We do not use:
- Cookies that build an advertising profile of you or track you across unrelated third-party websites
- Cookies that sell or share your personal data for advertising
Our analytics and product-experience cookies (Google Analytics, PostHog) measure how the Service itself is used, in aggregate. In the EEA, the UK, and Switzerland they are set only with your consent; elsewhere they may load by default and you can opt out at any time (see Section 5.1). We do not sell data collected via cookies to third parties.
5. Your choices
5.1 Cookie banner
When you first visit SkyLog from the EEA, the UK, or Switzerland, we display a cookie banner where you can accept or decline non-essential cookies (analytics). No analytics cookies are set until you accept. Your preference is saved for 12 months.
Regional handling. We determine your region from your approximate location (derived from your IP address at our edge network). Outside the EEA, the UK, and Switzerland, where prior opt-in consent is not legally required, analytics cookies may load by default without a banner. Wherever you are, you can decline or withdraw at any time via “Cookie settings” in the footer, and we will not set — or will remove — analytics cookies.
5.2 Browser settings
You can control cookies through your browser settings. Disabling all cookies will prevent SkyLog from functioning correctly, as authentication cookies are required. Instructions for common browsers:
- Chrome: Settings → Privacy and Security → Cookies
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Settings → Privacy → Manage Website Data
- Edge: Settings → Cookies and Site Permissions
5.3 Withdraw consent
You may withdraw your consent to analytics cookies at any time by clicking “Cookie settings” in the footer of SkyLog, or by contacting us at [email protected].
6. Changes to this policy
We may update this Cookie Policy when we add new technologies or service providers. We will notify you via the cookie banner or by email for material changes.
7. Contact
For questions about cookies or to exercise your rights, contact us at:
TEGRALAB S.R.L.
B-dul Dacia nr. 133, Sc. D, Sector 2, București, Romania
[email protected]