Legal · Cookie Notice

Cookie Notice

We keep cookies to a minimum. Here's exactly what we set, why, and how to opt out if you'd like.

Effective: January 1, 2026

Last updated: May 2026

On this page

What are cookies?
How we use them
Types we use
Full cookie list
Third-party services
Your controls
Policy updates
Contact

What are cookies?

Cookies are small text files placed on your device when you visit a website. They let the website remember things about your visit — like whether you're signed in — so you don't have to repeat yourself on every page load.

Cookies come in two flavours: first-party (set by emmy.dev directly) and third-party (set by services we embed, like Cloudflare Analytics). We use both, but we've kept the list short.

How we use cookies

We use cookies for three purposes:

Authentication: When you sign into the Emmy client portal, Supabase sets a session cookie so you stay logged in between pages. Without this cookie, the portal doesn't work.

Analytics: We use Cloudflare Web Analytics to understand how visitors use the site — which pages are popular, where traffic comes from, and whether we have broken pages. This data is aggregate and not tied to you personally.

Performance & security: Cloudflare sets a small number of cookies as part of its CDN and DDoS protection. These are necessary for the site to load reliably.

What we don't do

We don't run advertising. We don't sell data. We don't use remarketing pixels, Meta Pixel, Google Ads, or any third-party ad networks. No cookies on this site track you across other websites.

Types of cookies we use

🔐

Essential

Required for core functionality — authentication, security, and Cloudflare protection. The site doesn't work without these.

📊

Analytics

Aggregate, privacy-friendly traffic stats via Cloudflare Web Analytics. No personal identifiers stored.

⚙️

Functional

Remembers preferences within a session — e.g., dismissing a notice. Cleared when your browser closes.

Full cookie list

Every cookie currently set on emmy.dev, as of the date above.

Name	Type	Provider	Purpose	Expires
sb-[ref]-auth-token	Essential	Supabase	Stores your authentication session for the client portal. Set only when you sign in.	1 week
sb-[ref]-auth-token.0	Essential	Supabase	Chunked session cookie (overflow). Companion to the auth token above.	1 week
__cf_bm	Essential	Cloudflare	Bot management — distinguishes humans from automated traffic to protect the site.	30 minutes
_cfuvid	Essential	Cloudflare	Identifies unique users for rate-limiting purposes. Does not track across sites.	Session
cf_clearance	Essential	Cloudflare	Stores proof that a browser passed a Cloudflare security challenge.	30 minutes
__cflb	Essential	Cloudflare	Load balancing — routes your requests to the same server within a session for consistency.	Session
cf_beacon_*	Analytics	Cloudflare Web Analytics	Privacy-first analytics beacon. Tracks page views and performance metrics without a persistent identifier.	Session

Cookie names with "[ref]" include your Supabase project reference, which is specific to our deployment and not personally identifying.

Third-party services

We embed a small number of third-party services that may set their own cookies. Here's what each one does:

Cloudflare Privacy →

CDN, DDoS protection, and privacy-first analytics. Cloudflare processes traffic through its global network to keep the site fast and secure. Web Analytics data is aggregated and not sold to advertisers.
Supabase Privacy →

Authentication and database provider for the Emmy client portal. Sets session cookies only when you log in. Your credentials are hashed and stored in accordance with Supabase's privacy policy.
Stripe Privacy →

Payment processing. Stripe may set cookies on its hosted checkout pages for fraud prevention. Emmy does not store card data; all payment handling is delegated to Stripe.

Your controls

You're in control. Here's how to manage cookies:

Browser settings: All modern browsers let you view, delete, and block cookies. Settings are usually found under Privacy & Security. Note that blocking essential cookies will break sign-in functionality.

Opt out of Cloudflare Analytics: Cloudflare Web Analytics respects the Do Not Track (DNT) header. If your browser sends DNT: 1, Cloudflare will not count your visit.

Sign out of the portal: Signing out of the Emmy portal deletes your Supabase session cookie immediately.

Browser-specific guides:

Chrome · Firefox · Safari · Edge

No consent banner?

We don't show a cookie consent banner because we don't use cookies that require consent under applicable law — we have no advertising, tracking, or profiling cookies. If our cookie usage changes, we'll add a consent mechanism and update this page.

Policy updates

We update this notice when our cookie usage changes. The "last updated" date at the top of this page always reflects the most recent revision.

Significant changes — like adding a new analytics provider — will be noted in our changelog and, where appropriate, communicated to portal users by email.

Questions?

If you have questions about how we use cookies, or want to request deletion of any data associated with your visit, reach out:

Email: hello@emmy.dev
Phone: 07016020193
Location: Lagos, Nigeria

We respond within one business day.

Ready to start a project?

Tell us what you're building. Quote within 3 business days.

Start a project →