Cookie policy

Last updated: July 2026

This policy describes how MySafeOps uses cookies and similar technologies when you visit mysafeops.com or use the web application.

1. Strictly necessary (no consent required)

We use cookies and browser storage that are essential for the service to work, including:

Session and authentication tokens when you use cloud sign-in (Supabase)
Local preferences (for example theme, last-opened workspace) stored in your browser
Security-related values (for example sign-in attempt lockout counters)
Offline-first workspace data in local storage / IndexedDB when you use the app without cloud sync

Under UK PECR, these do not require a consent banner because they are strictly necessary to provide the service you request.

2. Security (Cloudflare Turnstile)

On sign-in and sign-up we may load Cloudflare Turnstile to reduce automated abuse. Turnstile may set cookies or use browser storage managed by Cloudflare. These are used for security, not advertising.

3. Optional analytics and error reporting

By default we do not load third-party advertising or cross-site tracking cookies on the product.

Some deployments may optionally enable:

Analytics (for example Google Analytics / Plausible) on the marketing site or blog — only after we add a consent mechanism where required
Error monitoring (for example Sentry) to diagnose crashes — typically without advertising profiles

If we enable non-essential analytics cookies in the future, we will update this policy and ask for your consent before those cookies are set.

4. Payments

If you subscribe to a paid plan, Stripe may set cookies when you use the hosted billing portal or checkout. Those cookies are controlled by Stripe under their own policy.

5. Managing cookies

You can clear site data and cookies from your browser settings at any time. Doing so may sign you out of your cloud account and reset local preferences or offline workspace data stored in that browser.

6. Contact

Questions about this policy: privacy@mysafeops.com