Subzero subscription tracker logo
Cookies

Small files, full disclosure.

Every cookie Subzero sets, why we set it, how long it lasts, and how to change your choices — in one page.

Last updated · 29 July 2026

Strictly necessary

Required to run the site. Cannot be switched off because the app breaks without them. No consent needed — that's the whole definition.

Name
sb-*-auth-token

Purpose

Keeps you signed in. Without it the app cannot verify who you are.

Retention

1 hour rolling (access token) · until sign-out (refresh token)

Set by

Subzero (Supabase auth)
subzero_consent_v1

Purpose

Stores your cookie choices so we don't ask again on every page.

Retention

180 days

Set by

Subzero
sidebar_state

Purpose

Remembers whether the app sidebar is collapsed.

Retention

7 days

Set by

Subzero

Analytics

First-party product analytics so we can see which pages get used and where things break. Only set with your consent.

Name
subzero_vid

Purpose

Anonymous visitor ID for product analytics. First-party only, never shared with ad networks.

Retention

365 days

Set by

Subzero
subzero_sid_v1

Purpose

Anonymous session ID (session storage). Groups page views into a single visit.

Retention

Session (30-minute idle)

Set by

Subzero
subzero:signup_tracked

Purpose

Local storage flag preventing duplicate signup analytics events for the same browser.

Retention

Until browser storage is cleared

Set by

Subzero

Marketing

Attribution cookies for friend-referral credit. Only set once you opt in — until then no marketing cookies are placed on your device.

Name
subzero_ref

Purpose

Records the referral code you arrived with so credit goes to the friend who invited you. Only set after you opt in to marketing cookies; until then the code lives in sessionStorage for the current tab only.

Retention

30 days (once consent is granted)

Set by

Subzero

Third-party services and their cookies

Subzero does not embed third-party trackers on marketing pages. The following services may set their own cookies when you interact with them:

  • Google — only when you click "Continue with Google" and authorise Subzero to read receipt emails. Governed by Google's own policies.
  • Supabase / Lovable Cloud — sets the auth cookies listed in "Strictly necessary" above.

Change your choices

You can accept, reject or fine-tune categories at any time. Withdrawing consent immediately purges the corresponding cookies from your browser.