What cookies we set, and why.

This Cookie Policy explains how TrustReply uses cookies and similar technologies on trustreply.app. It supplements our Privacy Policy.

Cookies are small text files that a website saves on your device when you visit. They're used to remember things — like that you're logged in — and to collect statistics. “Similar technologies” include local storage, session storage, and pixel tags, all of which we treat the same way as cookies for purposes of this policy.

Strictly necessary

These cookies are required for the service to function. They cannot be disabled in our system and they don't store information that identifies you for marketing purposes.

• Authentication. Keeps you signed in across pages. Set when you log in; cleared when you log out or the session expires.
• Session security. Cross-site request forgery (CSRF) protection and session integrity. Lifetime: session or up to 14 days, depending on the cookie.
• Load balancing and routing. Sticky-session and region-routing identifiers set by our hosting provider.

Functional

These remember preferences you've set, like UI theme, recently used filters, and dismissed notices. They aren't strictly necessary but make the product nicer to use.

Analytics

We use privacy-respecting, aggregated analytics to understand which features are used and where users get stuck. Where possible we use cookieless analytics (Plausible or equivalent). Where we use cookie-based analytics, we request consent before setting the cookies, except in jurisdictions where such consent isn't required.

Advertising

We don't use advertising cookies. We don't set retargeting pixels. We don't share data with ad networks.

The following third parties may set cookies on your device when you use TrustReply:

• Stripe (when payments are enabled) — fraud-prevention cookies tied to checkout. Stripe's cookie policy.
• Supabase — authentication cookies set as part of the sign-in flow. Supabase privacy.
• Vercel — load-balancing and security cookies set by our hosting provider. Vercel privacy.

These third parties' cookies are governed by their own policies, which we've linked above.

By using TrustReply, you consent to our use of strictly necessary and functional cookies. For analytics and other non-essential cookies (where applicable), we ask for your consent through a cookie banner the first time you visit. You can withdraw consent at any time using the cookie preferences link in our footer.

If you don't consent to strictly necessary cookies, the service won't work — we can't keep you signed in, for example. Withdrawing consent for those means you should stop using the service.

You can also manage cookies directly in your browser. Most browsers let you block all cookies, accept only first-party cookies, or delete cookies on exit. Check your browser's help pages for instructions. Common entry points:

• Chrome
• Firefox
• Safari
• Edge

Note that blocking strictly necessary cookies will break parts of the service.

Major browsers offer a “Do Not Track” (DNT) signal. There's no industry standard for how to respond to it, and we don't respond to DNT signals at this time. We do respect Global Privacy Control (GPC) signals where required by law (for example, under the CCPA).

We may update this Cookie Policy from time to time. The “Last updated” date at the top reflects the most recent change. For material changes, we'll surface a notice in-product.

Questions about cookies or this policy? Email privacy@trustreply.app.