Cookies are small text files that a website places on your device (computer, tablet, or mobile phone) when you visit it. They are widely used to make websites work, function more efficiently, and provide useful information to site operators.
Cookies can be:
Session cookies: Temporary cookies that expire when you close your browser.
Persistent cookies: Cookies that remain on your device for a set period of time or until you delete them.
First-party cookies: Set directly by Lexfora on our domain.
Third-party cookies: Set by external services we use (such as analytics providers). See Section 6 for details.
Similar technologies — such as local storage and session storage — may also be used for the same purposes as cookies and are covered by this policy. References to "cookies" in this policy include these similar technologies.
2. Types of Cookies
We use three categories of cookies:
Necessary Cookies
These cookies are essential for Lexfora to function. They enable core features including secure sign-in, session management, and consent preference storage. Necessary cookies cannot be disabled — without them, you would not be able to sign in or use the platform. They are set by us or by Supabase, our authentication and database provider.
Analytics Cookies
Analytics cookies help us understand how visitors interact with our website and platform by collecting information about pages visited, features used, time spent, and errors encountered. This information is aggregated and used to improve the product. Analytics cookies are only set after you have given your consent through our cookie banner or preference center.
We use PostHog for product analytics and Google Analytics for website traffic analytics.
Functional / Preference Cookies
Functional cookies remember your settings and preferences to provide a more personalized experience. These include your selected color theme (light or dark mode), UI layout preferences (e.g., sidebar state), and font preferences. Functional cookies improve your experience but are not strictly necessary for core functionality. They are set by us (first-party) and stored locally on your device.
3. Cookie Inventory
The following table lists the specific cookies and storage items currently in use on Lexfora, along with their purpose and duration. This list is updated when cookies change.
Name / Key
Provider
Category
Purpose
Duration
sb-access-token
Supabase
Necessary
Authenticates your current session so you stay signed in while using the app
Session (browser close)
sb-refresh-token
Supabase
Necessary
Refreshes your authentication token so you remain signed in across browser sessions without re-entering your password
1 year
cookie-consent
Lexfora
Necessary
Stores your cookie consent preferences (which categories you have accepted or rejected) so we do not ask you again on every page visit
1 year
ph_* (multiple)
PostHog
Analytics
Tracks anonymous product usage events and feature interactions to help us understand how the platform is used and where to improve it. Only set after consent.
1 year
_ga
Google Analytics
Analytics
Distinguishes unique visitors and tracks website traffic. Used to generate statistical reports on site usage. Only set after consent.
2 years
_gid
Google Analytics
Analytics
Distinguishes users within a 24-hour window to help calculate session metrics. Only set after consent.
24 hours
theme
Lexfora
Functional
Remembers your light/dark mode preference so the correct theme is applied when you return
1 year (localStorage)
ui-storage
Lexfora
Functional
Stores UI layout preferences such as sidebar collapsed/expanded state and font selections
Persistent (localStorage)
Note: "localStorage" entries are stored in your browser's local storage rather than as HTTP cookies. They behave similarly but do not expire automatically; you can clear them through your browser settings.
4. How We Use Cookies
We use cookies to:
Authenticate and secure sessions: Keep you signed in to your Lexfora account securely and verify your identity across page loads.
Store consent preferences: Remember whether you have accepted or rejected analytics and functional cookies, so we only load consented-to technologies.
Understand product usage: With your consent, collect anonymized data about which features are used, where users encounter issues, and how navigation flows work — helping us prioritize improvements.
Measure website performance: With your consent, analyze traffic sources, page performance, and session behavior through Google Analytics.
Personalize your experience: Remember your display preferences (theme, sidebar, font) so you do not need to reset them on every visit.
Analytics and functional cookies are only loaded after you have explicitly consented through our cookie banner or preference center. Withdrawing consent will prevent those cookies from being set on future visits; however, it will not delete cookies already stored on your device, which you can remove through your browser settings.
5. Managing Cookies
You have several options to control how cookies are used:
Cookie Preference Center: Use our tool (also linked in the site footer) to accept or reject cookies by category at any time. Your choice is saved for one year.
Browser Settings: Most browsers allow you to view, block, or delete individual cookies. Common options include blocking all cookies, blocking third-party cookies only, or clearing cookies when you close the browser. Consult your browser's help documentation for specific instructions:
PostHog Opt-Out: You can opt out of PostHog analytics by rejecting analytics cookies in our Cookie Preference Center. You may also opt out directly via PostHog's privacy controls.
Please note that blocking necessary cookies (such as authentication cookies) will prevent you from signing in and using the Lexfora platform. Blocking functional cookies will not affect core functionality but may mean your preferences are not remembered between sessions.
6. Third-Party Cookies
The following third-party services may set cookies or use similar tracking technologies when you use Lexfora:
Supabase: Sets authentication cookies (necessary) to manage secure sign-in sessions. These are first-party in nature as they are set on our domain by the Supabase client library. Supabase Privacy Policy
PostHog: Sets analytics cookies (consent-gated) to track product usage events. PostHog is configured to anonymize IP addresses and user identifiers where possible. PostHog Privacy Policy
Google Analytics: Sets analytics cookies (consent-gated) to measure website traffic and behavior. Google may use this data in accordance with its own privacy policy. Google Privacy Policy
Vercel: Our hosting provider may set performance cookies or edge-network identifiers to optimize page delivery. Vercel Privacy Policy
Stripe: If you access billing or payment pages, Stripe may set cookies on its own domain to support secure payment processing and fraud prevention. These are set by Stripe on stripe.com and are subject to Stripe's own cookie policy. Stripe Privacy Policy
We do not use cookies for advertising, retargeting, or cross-site behavioral tracking. We do not share cookie data with advertising networks.
7. Updates to This Policy
We may update this Cookie Policy from time to time to reflect changes in the cookies we use, new legal requirements, or product changes. When we make material changes, we will update the effective date at the top of this page and, where required by law, notify you through our cookie banner or by email.
We encourage you to review this Cookie Policy periodically to stay informed about how we use cookies.
8. Contact
For questions about this Cookie Policy or to exercise your cookie preferences, please use our tool, our Contact form.
