Cookie Policy
Version 2026-10-16 · Effective October 16, 2026
1. About This Policy
This Cookie Policy explains how Conduct Studio uses cookies and similar technologies, including browser local storage, and how you can control them. It supplements our Privacy Policy and applies to the marketing site, web portal, sign-up, public review pages, and web content embedded in the Conduct desktop application. The desktop application uses the same strictly necessary Supabase authentication cookies inside its protected Chromium session, together with local device preferences. Native Finder, workspace, and Dropbox File Provider access does not depend on optional analytics cookies.
2. What Are Cookies?
Cookies are small text files placed on your device when you visit a website. Similar technologies, such as local storage, store data in your browser. They can be "strictly necessary" (required for the site to function), "functional" (remembering preferences), or "analytics" (helping us understand usage). We do not use advertising or cross-site tracking cookies.
3. How We Use Cookies
We use only the cookies and local-storage items listed in the table below. Strictly-necessary items are required to sign you in, keep your session secure, and remember your workspace and your cookie choice — these cannot be switched off. We set analytics only where you have given consent. We do not use any cookie for advertising, ad-targeting, or selling or sharing your data.
4. Cookies & Storage We Use
The table below lists the cookies and local-storage items we use, their purpose, category, and duration.
| Name | Provider | Purpose | Category | Duration |
|---|---|---|---|---|
| Supabase auth session | Conduct / Supabase | Keeps you signed in and secures your session (authentication). | Strictly necessary | Session / refresh token lifetime |
| conduct-active-org | Conduct | Remembers which workspace (organisation) you are currently using. | Strictly necessary | Persistent (until changed) |
| conduct-cookie-consent | Conduct | Stores your cookie/analytics choice so we don't ask again. | Strictly necessary | 6 months (first-party cookie and local storage) |
| Interface preferences (e.g. sidebar, filters, reviewer name) | Conduct | Remembers UI preferences locally on your device. Never sent to our servers. | Functional (local storage) | Persistent (local storage) |
| PostHog analytics | PostHog (EU) | Aggregated, privacy-respecting product analytics (feature usage). Set only if you consent. | Analytics (consent required) | Identifiable events up to 6 months; longer-lived statistics are aggregated and non-identifying |
5. Analytics & Your Consent
Non-essential analytics (PostHog) are disabled by default and are enabled only after you select "Accept analytics". You can withdraw as easily as you consented by choosing "Manage cookies" in the site footer or on this page, from Settings → Legal when signed in on the web, or using Settings → Privacy in the desktop app. Withdrawal takes effect immediately for that device and, when signed in, is synchronized to your account. A Global Privacy Control signal always counts as a rejection. Withdrawal does not affect lawful processing completed before it. We do not enable session recording or advertising profiles. Identifiable analytics events are retained for no more than six months; longer-lived statistics are aggregated and non-identifying.
6. Managing Cookies
You can accept or reject non-essential analytics using the banner and change the choice at any time through the Manage cookies link in the site footer, on this page, or in Settings → Legal. Accept and Reject are presented equally. You may also delete or block storage through your browser, although blocking strictly necessary authentication cookies may prevent the Service from working. If account synchronization temporarily fails, Conduct keeps analytics off on that device and retries the withdrawal before analytics can initialize again.
7. Changes & Contact
We may update this Cookie Policy from time to time; the effective date is shown at the top. Questions about cookies can be sent to privacy@conductstudio.com.