Cookies and local storage
Last updated May 20, 2026
What we store
Journey Builder uses cookies and browser localStorage to keep you signed in, remember your preferences, and (with your consent) help us improve the product. The table below lists every item we set, what it does, and how long it lasts.
Consent model
Strictly necessary items load on every visit — the app cannot work without them (sign-in session, theme, your consent choice itself). Two optional categories load only after you opt in via the cookie banner: Product analytics (PostHog) and Error reporting (Sentry). You can Accept all, Reject all, or Customize at any time from the banner. If you already made a choice, reopen the preferences from /settings/privacy.
Items we use
| Name | Category | Type | Purpose | Duration | Provider |
|---|---|---|---|---|---|
| sb-*-auth-token | Strictly necessary | Cookie | Holds the signed-in user's session so the app can keep you authenticated across requests. | Up to 1 year (rolling refresh) | Supabase |
| sb-*-auth-token-code-verifier | Strictly necessary | Cookie | PKCE OAuth security parameter used during sign-in callbacks. | Transient (cleared after sign-in) | Supabase |
| cjm_consent_v1 | Strictly necessary | localStorage | Remembers your cookie preferences so the banner doesn't appear on every page. | Until you clear it via /settings/privacy | Journey Builder |
| theme | Strictly necessary | localStorage | Remembers your light/dark/system theme choice. | Until you clear it | Journey Builder |
| ph_* | Product analytics | Cookie + localStorage | Anonymous usage events (page views, feature clicks) to understand which features matter. Only loaded if you click "Accept all" or enable "Product analytics" in the banner. | Up to 1 year | PostHog |
| Sentry browser events | Error reporting | localStorage | Sends browser error events and redacted diagnostics when a crash occurs. Session replay is disabled. Only loaded if you enable "Error reporting" in the banner. | Until consent is revoked or browser storage is cleared | Sentry |
Revoking consent
You can change your mind anytime. Sign in and go to Settings → Privacy & Data and click Manage cookie preferences. The banner re-opens with your current choice; toggle categories and save. We stop loading the corresponding scripts on your next page load.
Related policies
- Privacy policy — what personal data we collect, why, and your GDPR rights.
- Subprocessors — every infrastructure provider that touches your data.
- Terms of service