Cookies
We use the smallest set of first-party cookies we can. No cross-site tracking, no advertising pixels, no third-party analytics on the consumer site.
What we use
| Name | Purpose | Duration | Type |
|---|---|---|---|
| sb-access-token / sb-refresh-token | Supabase authentication. Without these you can't stay signed in. | Session + 1 week | Essential |
| theme | Remembers your light/dark preference so the app doesn't flash on load. | 1 year | Functional |
| jcil-sidebar | Whether the chat sidebar is open or collapsed. | 1 year | Functional |
| __vercel_live_token | Vercel's preview deployment infrastructure (non-production only). | Session | Essential |
What we don't use
- Google Analytics, Facebook Pixel, or any ad-network tracker on the consumer site.
- Cross-domain tracking cookies.
- Third-party marketing cookies from the embed widget — the widget runs first-party inside the customer's iframe.
Managing cookies
Every modern browser lets you delete cookies for a specific site. Clearing JCIL.AI cookies will sign you out. The essential authentication cookies will be recreated the next time you sign in — we don't offer a way to use the app without them.
"Do Not Track"
We don't sell, share, or monetize cookie data, so a DNT signal doesn't change our behavior — there's nothing to turn off. California residents who want a formal opt-out can use the privacy policy's CCPA rights section.
Last updated: April 17, 2026.