Executive Cookie Policy

Cookies are small text files placed on your device by the sites you visit. We also treat similar technologies (localStorage, sessionStorage, pixel tags) as "cookies" for the purposes of this policy because they raise the same consent considerations.

Strictly necessary. Session and authentication tokens (Supabase auth), CSRF protection, and load balancing. Without these the product cannot function. Legal basis: legitimate interest / contract performance; consent not required.

Functional. Preferences such as theme, dashboard layout, dismissed onboarding tips, and consent record itself. Off by default.

Analytics. PostHog product analytics used to understand which features are used and to detect errors. Aggregated, no advertising trackers, no cross-site tracking. Off by default.

Marketing. Attribution parameters on our own marketing pages so we can measure which campaigns work. No third-party ad targeting. Off by default.

AI improvement. An opt-in flag telling us you're willing to have de-identified prompt/outcome signals used to tune prompt quality and model routing. Off by default; you can change it any time.

The first time you visit, a banner asks you to accept all optional categories, reject non-essential, or open Preferences and choose per category. Your decision is recorded in your browser (localStorage key exeaura.consent.v1) and applied immediately across the product. No optional cookie loads before you decide.

You can change your preferences at any time from Account → Privacy or by re-opening the banner:

Open cookie preferences

We do not permit third-party advertising networks. Cookies set by our processors (for example PostHog analytics or Stripe checkout) are governed by their respective policies and only load in the categories you have consented to.

Most browsers let you block or delete cookies. Doing so may sign you out of the product and disable non-essential features. See your browser's help pages for instructions.