Cookie Policy
Last updated: August 26, 2026
1. What Are Cookies
Cookies are small text files stored on your device by your web browser. They are widely used to make websites work efficiently and to provide information to the site operator. BevSync uses strictly necessary cookies so the platform can function, plus optional analytics cookies (PostHog) when you accept the cookie banner.
2. Cookies We Use
Strictly necessary and functional cookies are always set. Optional analytics cookies are set only after you click Accept on the cookie banner. We do not use advertising or retargeting cookies.
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
| sb-* | Strictly Necessary | Authentication session management. These cookies store your login session (as a JSON Web Token) so you remain signed in as you navigate the platform. They are set by Supabase Auth and are HTTP-only and Secure. | Session (refreshed on each request) |
| bevsync_active_org | Functional | Stores your currently active organization ID. This allows users who belong to multiple organizations to switch between them without losing context. It is HTTP-only, Secure in production, and uses SameSite: Lax. | 1 year |
| bevsync_consent | Functional | Stores your cookie-banner choice (accept or reject analytics). SameSite: Lax. | 1 year |
| ph_* | Analytics (optional) | Set by PostHog only after you accept analytics. Used for product analytics, error tracking, and session replay (distinct id, session id). Events are sent through a first-party /ingest proxy on our domain. | Up to 1 year |
3. Local Storage
In addition to cookies, BevSync uses browser localStorage for:
- Recent search queries (
bevsync:recent-searches) — stays in your browser and is never sent to our servers - Cookie-banner choice (
bevsync_cookie_consent) — remembers Accept or Reject - PostHog persistence (after Accept) — distinct id and session metadata used for analytics and session replay
Clearing your browser data removes this local storage.
4. What We Do Not Use
- No advertising or retargeting cookies
- No Google Analytics, Mixpanel, Segment, or Amplitude
- No social media cookies or embeds
- No session replay of payment-card or password fields (PostHog masks all inputs by default)
5. Managing Cookies
Strictly necessary cookies (authentication and active organization) are required to use the platform. Optional analytics cookies are controlled by the cookie banner: choose Accept to enable PostHog, or Reject to keep analytics off. You can clear site data in your browser to reset the banner. Disabling all cookies will prevent sign-in.
6. Changes to This Policy
If we introduce additional optional cookies, we will update this page and notify users of material changes via email with at least 30 days' notice.
7. Contact
Questions about our use of cookies? Contact us at support@bevsync.net.