1. What Cookies Are
Cookies are small text files stored in your browser when you visit a website. They let a site recognize your device on the next request — which is how features like "stay signed in" work.
2. Why We Use Cookies
- Keep coordinators signed in across page loads and tabs.
- Remember coordination board, locale, and queue layout preferences.
- Measure which capabilities get used so we can improve triage workflows.
- Detect and prevent fraud and abuse.
We do not use cookies for advertising, retargeting, cross-site tracking, or selling data to third parties.
3. Categories of Cookies
- Essential — required for sign-in, security, and core operation. Cannot be disabled.
- Functional — remember preferences like coordination board, language, and queue layout.
- Analytics — privacy-safe counts of page views and capability usage.
- Performance — measure load and triage response times.
4. Full Cookie List
| Name | Category | Purpose | Duration | Party |
|---|---|---|---|---|
| ag_session | Essential | Maintains your signed-in coordinator session. | Session | First-party |
| ag_csrf | Essential | Prevents cross-site request forgery on form submissions. | Session | First-party |
| aidgrid.cookieConsent.v1 | Essential | Stores your cookie preferences so we don't ask again. | 12 months | First-party |
| ag_org_scope | Functional | Remembers which organization coordination board you last opened. | 30 days | First-party |
| ag_locale | Functional | Remembers your language and locale preference. | 12 months | First-party |
| ag_queue_view | Functional | Remembers the queue layout (compact vs. detailed) you prefer. | 90 days | First-party |
| ag_usage | Analytics | Counts page views and feature usage. No case content. No IP storage. | 13 months | First-party |
| ag_referrer | Analytics | Records the marketing source that referred you (e.g. partner page). | 30 days | First-party |
| ag_perf | Performance | Measures page load and triage response times to find slow paths. | 7 days | First-party |
| sb-access-token | Essential | Supabase auth token — required to keep coordinators signed in. | Session | Third-party |
| sb-refresh-token | Essential | Supabase refresh token — keeps your session alive across visits. | 30 days | Third-party |
5. How to Manage Cookies
In AidGrid
Open the cookie preferences at any time using the "Cookies" link in the footer. Essential cookies stay on; you can toggle Functional, Analytics, and Performance individually.
In your browser
Most browsers let you block or delete cookies in their privacy settings. Blocking essential cookies will prevent sign-in and break parts of the coordinator app.
6. Third-Party Cookies
- Supabase sets session cookies that keep coordinators signed in.
- Resend handles transactional and (opt-in) marketing email. Resend does not set browser cookies on AidGrid pages.
- Analytics is privacy-safe and first-party only. No Google Analytics, no advertising pixels.
7. Updates to This Policy
We may update this policy as cookies change. Significant changes are reflected in the "last updated" date above. Questions: privacy@aidgrid.org.