Legal
Cookie policy
We keep cookie use to the bare minimum needed to operate the service.
What is a cookie
Cookies are small text files a website stores on your device. We also use closely-related browser-storage mechanisms (localStorage, sessionStorage) and treat them under this same policy.
How we use them
- Strictly necessary — auth session, CSRF protection, the visitor ID that ties a chat to one person across page loads.
- Functional — remembering pre-chat name/email so visitors don't re-type, dismissed-trigger memory.
- Analytics — anonymous, aggregated usage stats. We do not use ad-tech tracking cookies.
Cookies we set
| Name | Purpose | Lifespan |
|---|---|---|
| lc_visitor_<id> | Stable visitor identifier (the chat thread) | 1 year |
| lc_session_<id> | Active chat session pointer | Until chat closes |
| lc_name_<id> | Name from pre-chat (so visitors don't re-type) | 1 year |
| lc_email_<id> | Email from pre-chat (same reason) | 1 year |
| lc_dismissed_triggers_<id> | Triggers visitor has already seen | 90 days |
| sb-access-token | Supabase auth session for merchants | 1 hour |
| sb-refresh-token | Renews the auth session | 7 days |
Your controls
You can clear cookies at any time from your browser settings. Doing so for the chat widget will reset your visitor ID; you'll appear as a new visitor next time.
We honor the browser's Do Not Track signal for analytics cookies.