What Prism sets, and what it doesn’t.

Prism sets one category of cookie: a Supabase session cookie that keeps you signed in. That’s it. We do not use cookies for advertising, cross-site tracking, or analytics. Our traffic analytics (Vercel Analytics) are cookieless and anonymous.

Because we do not use non-essential cookies, we do not show a cookie banner.

·sb-* (Supabase auth session) — keeps you signed in; required for the service to function at all. Rolling session, refreshed silently. Set by Supabase on Prism’s behalf. Strictly necessary: you cannot use Prism without it.

If your browser rejects this cookie, Prism will not be able to sign you in.

We use Vercel Analytics and Vercel Speed Insights to count page views and track Core Web Vitals. These are cookieless and send no personal identifiers. We cannot tie an analytics event back to a specific user; Vercel cannot either.

·No advertising or remarketing cookies (Meta pixel, Google Ads, TikTok pixel, X pixel, LinkedIn Insight).

·No cross-site tracking cookies.

·No analytics cookies beyond the cookieless Vercel analytics above.

·No session replay or heatmap tools (no FullStory, LogRocket, Hotjar).

·No browser fingerprinting for ad-targeting or fraud scoring.

If we ever change this — e.g. add a non-essential analytics cookie — we will update this page, email active users, and (for EU/UK visitors) show a consent banner that complies with UK PECR and the EU ePrivacy Directive before setting anything.

·Browser settings. You can block or clear cookies in your browser at any time. Blocking the Supabase session cookie will sign you out.

·Do Not Track. We don’t set cookies that respond to DNT signals because we don’t set cookies that are subject to tracking. DNT is effectively a no-op on Prism.

Any addition of a non-essential cookie or a new analytics tool is announced on this page at least 14 days before it becomes active, and active users are emailed.

Cookie questions: privacy@prismlens.net.