Legal

Cookie policy

Which cookies PhdFit sets, why, and how long they live. Last updated April 24, 2026.

What we use

PhdFit only sets the cookies it needs to run. No advertising cookies, no third-party pixels. The categories below are exhaustive.

Strictly necessary

Supabase session cookies (managed by sb-*-auth-token) keep you signed in. A lightweight CSRF cookie protects form submissions. These cannot be turned off — the product does not function without them.

Preferences

A small cookie remembers your last active workspace thread so reloading the page drops you back where you were. Cleared automatically on sign-out.

No analytics or ads

We deliberately do not run Google Analytics, Meta Pixel, or any advertising SDK on the marketing pages or the workspace. This means the landing page loads fast and your browsing is not profiled.

Managing cookies

You can clear PhdFit cookies from your browser's site settings at any time. Doing so will sign you out but will not delete the account or the data inside it.