Cookie Policy
Effective date: April 8, 2026
Last updated: May 11, 2026
This Cookie Policy explains how Whisper ("we", "our", "us") uses cookies and similar technologies on whisper.day, and how we use Google Analytics on our public marketing site and app shell. Our journal at blog.whisper.day may also load Google Analytics; it is part of the Whisper project and is summarised here, while the exact tags and consent timing on that subdomain may differ.
1. What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They allow the website to remember information about your visit—such as whether you are logged in—or, where you have opted in, to help us understand in aggregate how pages are used.
2. Cookies and Similar Technologies We Use
2.1 Strictly necessary (authentication)
Whisper uses essential cookies required for the Service to function (for example, keeping you signed in). We do not use these for advertising.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
sb-[project]-auth-token | Supabase | Stores your authentication session so you remain logged in | Session / up to 1 week |
sb-[project]-auth-token.0 | Supabase | Auth token fragment (split cookie for size limits) | Session / up to 1 week |
These cookies are set by Supabase, our authentication and database provider, when you sign in with Google.
2.2 Analytics (Google Analytics 4 on whisper.day)
On whisper.day, we use Google Analytics 4 (GA4) to collect pseudonymous statistical information—for example which pages are viewed, general device and browser characteristics, coarse location derived by Google from IP address (not precise GPS from us), and interaction events such as taps on sign-in buttons. We use this to understand aggregate traffic and product interest. GA4 is not used to read or analyse the text of your personalised Whisper readings stored in your account.
Google may set cookies or use similar storage (for example identifiers beginning with _ga). Processing is described in Google’s Privacy Policy and Google Analytics terms.
Consent in the EU / EEA / UK (and similar cases): where we determine that opt-in consent is required before non-essential analytics cookies, we do not load Google Analytics until you choose Accept analytics on our cookie banner. If you choose Essential only, analytics tags are not loaded on whisper.day (authentication cookies may still apply if you sign in).
Other regions: where local law does not require that opt-in for this deployment, we may enable Google Analytics without showing that banner, relying on our legitimate interests in measuring use of our public website (see our Privacy Policy). You can still block analytics using browser settings or extensions.
Changing your choice: where the banner applies, use Cookie preferences in the site footer to reopen the banner. Clearing site data for whisper.day removes your saved choice and may show the banner again.
3. What We Do Not Use
We do not use whisper.day analytics data to sell your personal information as commonly understood under privacy laws, or to operate cross-site behavioural advertising through these tags. We do not deploy social remarketing pixels on whisper.day as part of this GA4 configuration.
4. Legal Basis
-
Essential (Supabase) cookies support logging in and securing your session. We rely on performance of a contract when you use an account, and on legitimate interests (and, where applicable, the “strictly necessary” exemption under the ePrivacy framework) for security and session integrity.
-
Google Analytics on whisper.day — where we show the cookie banner, we rely on your consent (GDPR Art. 6(1)(a) / ePrivacy-aligned opt-in for storage/access not strictly necessary). Where we do not show the banner, we rely on legitimate interests (Art. 6(1)(f)) in understanding aggregate website use, as described in the Privacy Policy, subject to local law.
5. Managing Cookies
Browser controls
You can manage or delete cookies via your browser settings:
- Chrome: Settings → Privacy and security → Cookies and other site data
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy → Manage Website Data
- Edge: Settings → Cookies and site permissions
Private/incognito windows typically discard cookies when you close the window (unless you sign in during that session).
In-product controls (whisper.day)
Where our banner is available, use Essential only or Accept analytics, or open Cookie preferences from the footer.
6. Third-Party Cookies
-
Supabase — Section 2.1. See Supabase’s Privacy Policy.
-
Google — OAuth sign-in may cause Google to set cookies during the authentication flow. When analytics is enabled, Google Analytics sets analytics-related storage as in Section 2.2. See Google’s Privacy Policy.
7. Changes to This Policy
We may update this Cookie Policy if we introduce new cookies or materially change how we use existing ones. We will update the “Last updated” date accordingly.
8. Contact
For any questions about our use of cookies:
privacy@whisper.day