Cookies and browser storage

Signed-out pages set no observed cookies. Authenticated sessions use the essential first-party Supabase cookie family sb-cuhxcqndaxtynsbgnqoy-auth-token, which may be split into numbered chunks. It maintains and refreshes sign-in.

The deployed configuration uses path /, host-only scope, SameSite=Lax, HttpOnly=false and a 400-day storage lifetime. Secure is explicitly enabled in production. HttpOnly remains false because the supported Supabase browser session model must refresh and update the cookie.

No localStorage or sessionStorage keys, analytics, advertising pixels or non-essential tracking were observed. Google Fonts are self-hosted and make no remote Google request. Stripe runtime was not observed; Stripe-hosted technology may apply if paid Checkout is enabled later.

Removing the authentication cookie will end or disrupt sign-in. Talentria does not currently provide a preference center because no preference-based tracking was found. This policy will be updated if the technologies change; it does not promise that no new technology will ever be introduced.