Cookie Policy
Version 2026-04-14
The Grail Scope only uses cookies that are strictly necessary to operate the Service. Under Art. 22.2 of Spanish Law 34/2002 (LSSI) and the ePrivacy Directive, strictly necessary cookies do not require prior consent. We do not currently use analytics, advertising, or third-party tracking cookies. If that changes, we will roll out a consent banner before activating them.
Cookies we set
| Name | Purpose | Type | Duration |
|---|---|---|---|
| sb-access-token, sb-refresh-token | Supabase authentication session | Strictly necessary | Session / 7 days |
| grailscope-vc-* | HMAC-signed view counter for free-tier paywall | Strictly necessary | 24 hours (rolling) |
| __stripe_mid, __stripe_sid | Stripe fraud prevention on the Checkout page | Strictly necessary (payment) | 1 year / 30 min |
Local storage
We use browser localStorage for user-interface preferences (preferred currency, dashboard layout, dismissed tips). This is not a cookie and is not sent to our servers; it stays in your browser until you clear it.
How to disable cookies
You can block or delete cookies via your browser settings. Blocking strictly necessary cookies will break login and the paywall.