chatbrat.ai uses a small number of cookies to run the service and understand how the product is used. This page lists every cookie by name, purpose, and retention. We do not use advertising cookies and we do not share cookie data with ad networks.
Categories of cookies we use
- Essential cookies — required to keep you signed in, protect your session, apply region rules, cache age-assurance results, and remember your consent choice. These load without asking because the service cannot function without them.
- Analytics cookies — PostHog. Load only after you press Accept all on the cookie banner (or opt in from Settings). EU/UK visitors are default-reject until they opt in.
Every cookie, named
| Name | Purpose | Duration | Category | Controller |
|---|---|---|---|---|
sb-<project>-auth-token | Supabase auth session. Keeps you signed in. | Session (refreshed on each login) | Essential | chatbrat.ai |
cb-region | ISO country code derived from request IP. Used to apply regional content rules (NSFW geo-block, age-assurance jurisdiction detection). | 24 hours | Essential | chatbrat.ai |
cb-nsfw-blocked | Cached result of the NSFW regional rule for the current country. Drives the consent-gate for analytics on EU/UK IPs. | 24 hours | Essential | chatbrat.ai |
cb-analytics-consent | Records your choice on the cookie banner (granted or denied). Without this, the banner keeps asking. | 12 months | Essential | chatbrat.ai |
cb-age-verified | Records that your account has passed age-assurance. Prevents repeated prompts in the same session. | Session | Essential | chatbrat.ai |
cb-safety-overlay | Records that the crisis-support overlay has been shown in the current session, to avoid repeated display of the same message. | Session | Essential | chatbrat.ai |
ph_<id>_posthog | PostHog product-analytics cookie. Aggregate usage patterns and feature-adoption funnels. No advertising IDs. Only set after analytics consent is granted. | 12 months | Analytics | PostHog Inc. (US) |
_vercel_jwt | Vercel hosting auth token — used only on protected deployment previews, not on public chatbrat.ai traffic. | Session | Essential | Vercel Inc. |
Local storage & similar technologies
We use browser localStorage for small client-only state: theme preference, age-gate acknowledgement, draft scenario inputs, and UI preference flags. This storage never leaves your device and is not transmitted to our servers.
Changing your choice
You can withdraw analytics consent at any time by clearing the cb-analytics-consent cookie in your browser's site data — the banner will re-appear on your next visit. Your browser also offers site-by-site cookie controls.
We honor the Global Privacy Control (GPC) signal. If your browser sends Sec-GPC: 1, we treat that as automatic rejection of analytics cookies. See Your Privacy Choices for the full opt-out options.
Contact
Questions about cookies or other tracking technologies: [email protected].