Cookies notice v1 — last updated 2026-04-29.
Cookies
Supp uses only first-party functional cookies. We do not use third-party tracking cookies, ad pixels, or session-replay tools.
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
next-auth.session-token | Authentication session | First-party functional | 30 days, rolling |
next-auth.csrf-token | CSRF protection | First-party functional | Session |
Analytics
We use a self-hosted instance of Umami in cookieless mode. Umami does not store any cookies, does not collect personal data, and does not share data with third parties. It records aggregate page views and referrers only.
Why no cookie banner?
Under PECR Regulation 6(4) and Article 5(3) of the ePrivacy Directive, strictly necessary cookies (authentication, CSRF) do not require prior consent. Our analytics tool does not use cookies at all. We therefore do not present a cookie banner.