Cookie Policy

Cookies are small text files stored by your browser when you visit a website. ProseRelay uses a minimal, privacy-first approach to cookies: we only set cookies that are strictly necessary to sign you in and keep your studio session secure.

We do not use third-party advertising cookies, cross-site tracking pixels, or behavioral profiling scripts.

When you sign in with Google, our authentication provider (Supabase Auth) sets encrypted HTTP cookies on our domain:

• Session Token Cookie (sb-*-auth-token): Maintains your authenticated session across page reloads so you can access the Studio and your Saved Library without signing in repeatedly.
• PKCE Code Verifier Cookie: A short-lived security cookie used during the Google OAuth redirect flow to prevent cross-site request forgery (CSRF) attacks.

In addition to essential authentication cookies, ProseRelay may use temporary browser state during an active session to preserve your current draft or Human-in-the-Loop review modal before final packaging.

Clipboard access is only triggered when you explicitly click a "Copy" button on a draft or image prompt.

You can clear or block cookies at any time through your browser settings, or by clicking "Log out" in the ProseRelay header, which immediately invalidates and clears your active session cookies.

Please note that blocking strictly necessary authentication cookies will prevent you from signing in to the `/orchestrate` studio and `/saved` library.