Legal
Cookie Policy
Last updated: 2026-06-13
This is the complete list. Operators HQ sets essential and functional cookies only: the ones below, nothing else. No analytics cookies, no advertising cookies, no cross-site trackers, no fingerprinting.
1. Every cookie we set
| Cookie | Type | Duration | What it does |
|---|---|---|---|
sb-*-auth-token | Essential | While you stay signed in | Keeps you securely signed in. Set by Supabase, our authentication provider, when you log in. Without it, login does not work. |
ohq_ref | Functional | 30 days | Referral attribution. Set only when you deliberately open someone's invite link, so the person who invited you gets credit when you join. We treat it as fulfilling the action you asked for: following an invite. |
ohq_notice_dismissed | Essential | 12 months | Remembers that you dismissed the cookie notice, so we stop showing it to you. |
sb-* stands for Supabase's session cookies, whose exact names include our project identifier.
2. What we deliberately do not use
- No analytics cookies. We do not run Google Analytics or any third-party analytics that sets cookies.
- No advertising cookies. There are no ads here, so there is nothing to target.
- No cross-site trackers. No social pixels, no fingerprinting, no data sold or shared for marketing. Ever.
Because everything we set is essential or fulfills an action you explicitly took, there is no consent-banner theater here. Just a one-time notice you can dismiss, and this page.
3. Managing cookies
Your browser can block or delete cookies at any time. Check its privacy settings. Fair warning: blocking the essential ones breaks sign-in, because the session cookie is how we know you are you. The ohq_ref cookie only ever appears if you open an invite link, and it expires on its own after 30 days.
Questions: support@operatorshq.app.