Draft for counsel review. Do not treat this as an in-force legal document.
Legal
Cookie Policy
Version 0.1.0-draftLast updated 16 September 2026
This draft explains cookies and local storage on getworkgraph.com. It should be read with the Privacy Policy.
What we store on your device
| Name / type | Category | Purpose | Duration |
|---|---|---|---|
| Authentication cookies (Supabase or equivalent) | Strictly necessary | Keep you signed in and protect account sessions | Session / refresh period set by the auth provider |
| wg_consent (first-party cookie + local storage) | Strictly necessary | Stores consent version, timestamp, anonymous id, and the exact categories granted | 180 days, or until you change/clear the choice |
| Theme / UI preferences (if set) | Functional | Remember dark/light or dashboard layout choices | Until you clear site data |
Analytics and marketing tags are not loaded unless you opt in. Any future tag in those categories is mounted behind a ConsentGate and stays off until a current consent record grants that category.
How to change your choice
- Use Accept all or Reject all on the first cookie banner. Both actions are on the same screen.
- Open Manage preferences to allow analytics or marketing separately, then save.
- Reopen the same manager anytime from Cookie preferences in the footer (or the legal nav). Reject all there is the withdrawal path — the same two buttons as granting consent.
- We re-prompt if the consent policy version increments. Clearing site data also brings the banner back.
- Browser controls can block cookies entirely; some features (sign-in) will not work without strictly necessary cookies.
Device and analytics data
Independent of cookies, our hosting provider (Vercel) and application logs may record IP address, user-agent, and requested URL for security and reliability. That processing is described under "Device / analytics" in the Privacy Policy. We do not sell this information.
Questions
Cookie questions: privacy@getworkgraph.com.