Cookie and device storage policy
This policy explains what JustLoop stores on your device, why, for how long, and how you control it. It covers cookies and every equivalent technology — local storage, session storage and similar browser storage — as required by article 5(3) of the ePrivacy Directive and the GDPR.
The short version
- JustLoop is a private work platform. We do not use advertising cookies, cross-site trackers, ad networks or any analytics storage.
- Everything we store is either strictly necessary to sign you in and run the platform, or a preference you set yourself (language, units, panel layout, unsent drafts).
- Because nothing we store is optional, there is nothing to accept or reject — the notice you saw is purely informational, as article 5(3) of the ePrivacy Directive requires.
- We never sell personal data and we do not profile you for advertising.
Categories
Strictly necessary
Sign-in session, security, support sessions and the notice acknowledgement itself. The platform cannot work without them, so they cannot be switched off.
Functional
Interface language and its translation cache, centimetres vs inches, panel layout and unsent message drafts. They only exist because of how you use the platform.
JustLoop does not use analytics or marketing cookies or storage, and will not add any without updating this policy and informing you first.
Everything we store
| Name | Type | Category | Purpose | Retention | Provider |
|---|---|---|---|---|---|
| sb-<project>-auth-token | Local storage | Strictly necessary | Keeps you signed in and authorises every request you make. | Until sign-out or token expiry | Supabase (data processor) |
| justloop_impersonation | Local storage | Strictly necessary | Marks a support session where a staff member is operating on behalf of an account. | Until the support session ends | JustLoop |
| jl.consent.v1 | Local storage | Strictly necessary | Remembers that you saw the storage notice, so we do not show it on every visit. | 12 months | JustLoop |
| fp.ui_language / fp.user_language / fp.auto_translate | Local storage | Functional | Remembers the interface language you selected. | Until you clear it | JustLoop |
| fp.uitr.<lang> | Local storage | Functional | Local cache of already-translated interface phrases, so the same text is not re-translated on every visit. | Until you clear it | JustLoop |
| fp.display_unit | Local storage | Functional | Remembers whether you work in centimetres or inches. | Until you clear it | JustLoop |
| sidebar:state | Cookie | Functional | Remembers whether the navigation sidebar is expanded. | 7 days | JustLoop |
| footer-credits-collapsed | Local storage | Functional | Remembers that you collapsed the credits badge. | Until you clear it | JustLoop |
| style-thread-collapsed / thread-composer-open:<id> / thread draft keys | Local storage | Functional | Keeps panel layout and unsent message drafts so you do not lose work when you navigate away. | Until sent or cleared | JustLoop |
| agent:watchlist / agent:actionState / agent:actionLog | Local storage | Functional | Remembers which items you pinned or dismissed on your dashboard. | Until you clear it | JustLoop |
Processors we rely on
- Supabase — authentication, database and file storage for your account and product data.
- Lovable AI Gateway — processes text and images you explicitly submit for interface translation, transcription and measurement import. It is invoked on request, sets nothing on your device, and receives no browsing behaviour.
- Transactional email provider — delivers invitations and notification emails.
Your choices
Everything we store is required for the platform to operate, so there are no optional categories to manage. You can review the full inventory at any time, and you can delete cookies and site data from your browser settings — note that clearing strictly necessary storage signs you out.
Your rights and contact
Under the GDPR you may request access, rectification, erasure, restriction, portability, and object to processing. Write to privacy@justloop.app. You may also lodge a complaint with your national data protection authority. See the privacy policy for the full picture.