Cookie Policy
Last updated: April 24, 2026
Short version: AutoPublish uses essential cookies to keep you logged in, plus optional analytics (PostHog) and support chat (Tawk.to) cookies to improve the product. We do not use advertising or cross-site tracking cookies. You can accept or reject non-essential cookies via the banner on every page.
1. What Are Cookies?
Cookies are small text files stored on your device by your browser when you visit a website. They allow websites to remember information about your visit, such as your login state, preferences, and session data. Cookies can be first-party (set by the website you are visiting) or third-party (set by other domains).
2. Cookies We Use
AutoPublish uses two categories of cookies: strictly necessary (always on, required for the service) and optional (analytics and support chat, only set when you click Accept on the cookie banner).
| Cookie / Storage | Provider | Category | Purpose | Duration |
|---|---|---|---|---|
| sb-access-token | Supabase (1st party) | Strictly necessary | Authentication session token so you remain logged in | Session / 1 hour |
| sb-refresh-token | Supabase (1st party) | Strictly necessary | Refreshes your authentication session without re-login | Up to 60 days |
| ph_* | PostHog (3rd party, US-hosted) | Optional — analytics | Product analytics: page views, feature usage, session replay (with all inputs masked) | Up to 1 year |
| TawkConnectionTime / __tawkuuid | Tawk.to (3rd party) | Optional — support chat | Powers the live chat widget for support conversations | Up to 6 months |
Strictly necessary cookies are set by AutoPublish's own domain using Supabase's authentication infrastructure. Optional cookies are only placed after you click Accept on the cookie banner. Click Reject and no optional cookies are set.
3. Cookies We Do NOT Use
AutoPublish does not use:
- Advertising / remarketing cookies — We do not use Facebook Pixel, Google Ads remarketing, LinkedIn Insight Tag, or any ad-network cookies.
- Cross-site tracking — We do not share cookie data with advertising networks or build profiles across unrelated sites.
- Sold-data analytics — We do not sell or rent cookie-derived data. PostHog and Tawk.to act as processors on our behalf under data-processing agreements.
4. Legal Basis (GDPR)
For users in the European Economic Area (EEA) and United Kingdom:
- Strictly necessary cookies (sb-access-token, sb-refresh-token) rely on legitimate interests (Article 6(1)(f) GDPR) and are exempt from consent under Article 5(3) of the ePrivacy Directive because they are required to deliver the service you requested.
- Optional cookies (PostHog analytics, Tawk.to chat) rely on your consent (Article 6(1)(a) GDPR). We obtain consent via the cookie banner shown on your first visit. No optional cookies are set until you click Accept. You can change your mind at any time by clearing your browser storage for this site, which will redisplay the banner on your next visit.
5. Local Storage
In addition to cookies, AutoPublish uses your browser's localStorage for non-personal preferences such as dismissing the site announcement banner. This data is stored only on your device and is never transmitted to our servers. It is not a cookie and is not subject to cookie laws.
6. How to Control Cookies
Because we use only strictly necessary cookies, disabling them will prevent you from logging in or using the AutoPublish dashboard. You can manage or delete cookies through your browser settings:
7. Changes to This Policy
We will update this Cookie Policy if we add new cookies or change how we use existing ones. Material changes will be communicated via a notice in the dashboard or by email.
8. Contact
Questions about our cookie practices? Email us at [email protected]. For broader privacy questions, see our Privacy Policy.