Legal
Effective May 10, 2026
Cookie policy
This page lists the cookies and similar storage technologies (localStorage, sessionStorage) that Out Budget uses, what they do, and how you can control them. For a broader picture of how we handle personal data, see the privacy policy.
What we use
Out Budget groups storage into three categories: strictly necessary, analytics, and marketing. Strictly necessary storage is always on; analytics and marketing storage only loads if you give consent through the cookie banner.
Strictly necessary
| Name | Purpose | Type | Retention |
|---|---|---|---|
| sb-access-token | Keeps you signed in (Supabase Auth session). | Cookie | 1 hour, refreshed on activity |
| sb-refresh-token | Refreshes the access token without re-asking for password. | Cookie | 30 days |
| outbudget.consent.v1 | Stores your cookie-banner choices so you aren’t asked again. | localStorage | 12 months |
| theme | Remembers whether you prefer light or dark mode. | localStorage | Persistent until you clear it |
Analytics and error monitoring (consent required)
These services help us understand which pages and features are used, where the experience could be better, and which errors block users. They load only if you select “Accept all” in the cookie banner or enable analytics in “Customize”. We do not use any of them for cross-context behavioural advertising.
| Name | Provider | Purpose | Type & retention |
|---|---|---|---|
| ph_*_posthog | PostHog (EU) | Distinct visitor ID, session state, and feature-flag cache for aggregated page-view and feature-use measurement. | localStorage, persistent until you clear it or withdraw consent |
| ph_*_window_id, ph_*_primary_window_exists | PostHog (EU) | Identifies the active browser tab to deduplicate pageviews across tabs. | sessionStorage, cleared when the tab closes |
| sentryReplaySession | Sentry (EU, Frankfurt) | Maintains Session Replay buffer state for the current tab. A short masked DOM recording is sent to Sentry only when a JavaScript error occurs, so we can debug the failure. All text is masked and media is blocked before transmission. | sessionStorage, cleared when the tab closes |
Marketing
We do not currently use any marketing cookies. If we add any in the future, this section will list them and they will require your explicit consent.
How to control cookies
- Out Budget banner — change your choice any time by clicking “Cookie preferences” at the bottom of any page.
- Browser controls — every modern browser lets you block or delete cookies for a site. Note that blocking strictly necessary cookies will sign you out and prevent you from logging back in.
- Do Not Track — we honour the GPC (Global Privacy Control) signal as a valid opt-out for analytics and marketing cookies.
Changes
When we add or remove a cookie, we will update this page and bump the effective date. For material changes (e.g. adopting a new analytics provider) the cookie banner will re-prompt you to confirm your choice.
Contact
Questions? Email support@outbudget.com.