Legal Notice

Cookie Policy

How TurboFinOps uses cookies and similar storage technologies, what information they collect, and how you can manage your preferences.

Last Updated: April 2026Tracking: No advertising cookies

Short summary

TurboFinOps uses a minimal set of cookies. The session cookie placed by Supabase Auth is strictly necessary and cannot be disabled -- without it, you cannot log in. We use a cookie to remember your theme preference. Stripe places cookies during checkout. We do not use advertising cookies, third-party tracking pixels, or behavioral profiling cookies.

1. What Are Cookies
2. How TurboFinOps Uses Cookies
3. Cookie Reference Table
4. Third-Party Cookies
5. Managing Cookies
6. Changes to This Policy
7. Contact

1. What Are Cookies

Cookies are small text files that a website stores on your device when you visit it. They are widely used to make websites work correctly, to remember your preferences, and to provide information to the website operators.

Similar technologies include localStorage and sessionStorage, which store data in your browser rather than in a cookie file. TurboFinOps uses these in addition to cookies, primarily to maintain session state on the client side. The same rules and rights apply to these technologies as to cookies under applicable privacy law.

Cookies can be session cookies (deleted when you close the browser) or persistent cookies (stored on your device for a defined period).

2. How TurboFinOps Uses Cookies

TurboFinOps uses cookies in the following categories:

Strictly necessary

These cookies are required for the platform to function. Without them you cannot authenticate, and your session cannot be maintained securely. They are placed automatically when you log in and do not require consent. You cannot opt out of strictly necessary cookies while continuing to use the platform.

Examples: Supabase Auth session token (sb-{project}-auth-token), CSRF protection tokens, the Next.js session token used by the server-rendered app shell.

Functional / preference

These cookies remember your preferences to improve your experience. They are not strictly necessary, but disabling them means your preferences will not be saved between sessions.

Examples: Theme preference (light/dark mode) stored in localStorage under the key cp-theme.

Third-party / payment

When you visit our checkout or billing portal, Stripe sets cookies on its own domain (stripe.com, js.stripe.com) to process your payment securely, prevent fraud, and maintain your checkout session. These are subject to Stripe's own privacy policy.

Not used

TurboFinOps does not use advertising cookies, retargeting pixels, behavioral profiling cookies, social media tracking cookies, or analytics cookies that track your behavior across other websites.

3. Cookie Reference Table

The table below lists the cookies and storage keys used by the TurboFinOps platform as of the date of this policy.

Name / Key	Type	Category	Purpose	Duration
sb-{project}-auth-token	Cookie (HttpOnly)	Strictly necessary	Stores the Supabase Auth session token (JWT). Required to authenticate API requests and maintain your login session.	Session / up to 7 days
sb-{project}-auth-token-code-verifier	Cookie	Strictly necessary	PKCE code verifier used during OAuth login flow. Deleted after login completes.	Session
cp-theme	localStorage	Functional	Stores your selected theme preference (light or dark). Used on next page load to apply your preferred theme without flash.	Persistent (no expiry)
__stripe_mid	Cookie (Stripe domain)	Third-party / payment	Stripe fraud detection identifier. Set on stripe.com when checkout is initiated.	1 year
__stripe_sid	Cookie (Stripe domain)	Third-party / payment	Stripe session identifier for the active checkout flow.	30 minutes

This list may not be exhaustive. Supabase and Stripe may introduce additional cookies as part of their platform updates. We will update this table when we become aware of material changes.

4. Third-Party Cookies

The only third-party cookies set in connection with TurboFinOps are those placed by Stripe when you visit a checkout or billing page. These cookies are set on the stripe.com domain, which is separate from TurboFinOps.com, and are required for Stripe to process payments and detect fraud. Stripe operates under its own Privacy Policy.

TurboFinOps does not embed third-party scripts from social media platforms, advertising networks, or analytics providers that set tracking cookies on our pages.

5. Managing Cookies

Browser settings

You can control cookies through your browser settings. Most browsers allow you to:

View all cookies currently stored on your device
Delete individual cookies or all cookies for a given site
Block all cookies, or block third-party cookies only
Set notifications when a site attempts to set a cookie

Note: if you block or delete the Supabase Auth session cookie, you will be logged out of TurboFinOps and will not be able to log back in until cookies are re-enabled. Strictly necessary cookies cannot be opted out of while continuing to use the authenticated platform.

Theme preference

The cp-theme localStorage key can be cleared at any time by clearing your browser's site data for TurboFinOps.com. You can also change your theme preference from within the dashboard Settings.

Stripe cookies

Stripe cookies are only set when you interact with a checkout or billing page. You can delete them via your browser's developer tools or cookie management settings. Blocking Stripe cookies may prevent payment pages from working correctly.

Do Not Track

TurboFinOps does not currently respond to Do Not Track (DNT) browser signals, because TurboFinOps does not engage in cross-site tracking. Strictly necessary cookies used for session management are placed regardless of DNT signals, as they are essential for service operation.

6. Changes to This Policy

We may update this Cookie Policy from time to time to reflect changes in the cookies we use or changes in applicable law. We will update the “Last updated” date at the top of this page when changes are made. For material changes, we will provide notice via the platform dashboard or by email where required by law.

Your continued use of TurboFinOps after changes to this policy take effect constitutes acceptance of the revised policy.

7. Contact

If you have questions about this Cookie Policy or about how TurboFinOps uses cookies, please contact:

TurboFinOps

Romania

Privacy: privacy@TurboFinOps.com

For your full privacy rights, see our Privacy Policy. For enterprise data-processing terms, contact legal@TurboFinOps.com.