Cookie Policy
Last updated: 2026-10-14
This Cookie Policy explains the cookies, local storage, and similar technologies used by SelfOS. Strictly necessary technologies operate to provide the Service. Non-essential technologies, including consent-gated analytics, are activated only after the applicable consent choice. You can refuse non-essential categories and later change your choice.
If you have any questions you can contact us at contact@selfos.club
1. What Are Cookies
A cookie is a small text file which is placed onto your device (e.g., computer, smartphone, or other electronic device) when you visit our website to store a range of information, for example, your language preference, or browser and device you are using to view the website. Those cookies are set by us and called first-party cookies. We also use third-party cookies, which are cookies from a domain different than the domain of our website, for our advertising and marketing efforts.
Session Cookies
Session cookies expire each time you close your browser and do not remain on your device afterwards. These cookies allow our website to link your actions during a particular browser session.
Persistent Cookies
Persistent cookies will remain on your device for a period of time, and will expire on a set expiration date, or when you delete them manually from your cache. These cookies are stored on your device in between browser sessions and allow your preferences and actions across our website to be remembered.
2. Similar Technologies
- Web Beacons (Pixel Tags) - Small, transparent images embedded into websites or emails that communicate with our server to acquire information such as technical specifications of your device, operating systems, and settings. They can track your activities during a session and help us improve our email communication.
- Software Development Kits (SDKs) - Third-party software development kits that may be installed in our Service. SDKs help us understand how you interact with our Service and collect certain information about the device and network you use to access the Service.
- HTML5 Local Storage - HTML5 contains functionality that allows information to be stored locally within the browser's data files. It operates similarly to cookies but can hold greater amounts of information and does not rely on an exchange of data with the website's server.
- Fingerprinting - SelfOS does not currently use browser or device fingerprinting for advertising or cross-site tracking. If that changes, we will update this policy and obtain any consent required before activation.
- Device Identifiers - SelfOS does not currently use mobile advertising identifiers such as IDFA or AAID for targeted advertising. Device information may still be processed where necessary for security, compatibility, or a feature you choose to use.
3. How to Manage Cookies
Disabling Cookies in Your Browser
You can manage non-essential technologies through the SelfOS consent controls and may also delete or block cookies through your browser. Blocking strictly necessary storage can prevent authentication, security, or other core functions from working.
For detailed instructions on how to control cookies through browser settings, visit: aboutcookies.org
Mobile Device Settings
Browser and operating-system privacy controls may provide additional choices. SelfOS does not currently rely on mobile advertising identifiers for targeted advertising.
- iOS: Use your browser/site-data settings to review or clear SelfOS storage. System tracking controls apply to third-party app tracking where relevant.
- Android: Use your browser/site-data settings to review or clear SelfOS storage. Advertising-ID controls are not required for SelfOS's current web analytics implementation.
4. Consent and Withdrawal
You can choose Essential Only, accept additional categories, or customize your preferences in the SelfOS cookie banner. Withdrawing non-essential consent stops future consent-gated collection; it does not retroactively make prior lawful processing unlawful.
You can manage non-essential technologies through the SelfOS consent controls and may also delete or block cookies through your browser. Blocking strictly necessary storage can prevent authentication, security, or other core functions from working.
5. Types of Cookies We Use
Strictly Necessary
Required for authentication, security, session continuity, consent records and core settings. These technologies are used only to the extent necessary to provide or secure the service and do not require optional analytics consent.
Performance
Consent-gated analytics help us understand page and feature usage. We use PostHog (EU) and, on our public website, Google Analytics 4. Neither starts until you allow analytics cookies. In PostHog, autocapture and session replay are disabled in the current implementation.
6. Cookies We Use
| Cookie Name | Provider | Type | Description |
|---|---|---|---|
| sb-*-auth-token | Supabase | Strictly Necessary | Authentication token for secure user sessions |
| NEXT_LOCALE | SelfOS | Strictly Necessary | Stores your preferred language setting |
| theme | SelfOS | Strictly Necessary | Stores your preferred theme (light/dark mode) |
| ph_* / SDK storage | PostHog EU | Performance | Consent-gated analytics help us understand page and feature usage. This integration uses PostHog's EU environment and is not initialized until analytics consent is granted. Autocapture and session replay are disabled in the current implementation. |
| _ga | Google Analytics 4 | Performance | Google Analytics 4. Distinguishes browsers with a random identifier so we can count visits to our public pages. Set only after you allow analytics cookies. Lasts up to 2 years by default; your browser may shorten this. |
| _ga_89V9DQPQH3 | Google Analytics 4 | Performance | Google Analytics 4. Keeps the state of your current visit (session) on our public pages. Set only after you allow analytics cookies. Lasts up to 2 years by default; your browser may shorten this. |
7. Third-Party Services
We work with third-party service providers who may set cookies or use similar technologies on our platform. Below is comprehensive information about our partners and their privacy practices:
Hosting & Infrastructure
Authentication & Identity
OAuth and optional connected Google services
Payment Processing
AI & Machine Learning
Communication Services
Video Conferencing
Analytics & Data
PostHog EU
Consent-gated analytics help us understand page and feature usage. This integration uses PostHog's EU environment and is not initialized until analytics consent is granted. Autocapture and session replay are disabled in the current implementation.
PostHog Privacy PolicyGoogle Analytics 4
Web analytics for our public pages
What it measures
Google Analytics 4 is provided by Google Ireland Limited, which processes this data on our behalf under Google's data-processing terms; Google LLC and other Google companies may act as its sub-processors.
It helps us understand how visitors use our public website: which pages are viewed, the session events Google records automatically (such as the first visit, the start of a visit and engagement time) and usual technical information (approximate country, device and browser type). Google uses your IP address only to estimate your approximate location and does not store it.
When it runs
GA4 runs only after you allow analytics cookies and never on sign-in, invitation, dashboard or contact-form pages.
What we don't send
We have switched off Google's additional enhanced-measurement events (scrolling, outbound clicks, site search, video, file downloads and form interactions).
SelfOS does not intentionally send your name, e-mail address, account ID or any content you create in the app; Google may still process browser identifiers (such as the ID in the _ga cookie) and technical information about your visit. Google signals and ad personalisation are turned off, and we have not enabled Google's data sharing settings.
International transfers
Google may process this data outside the EEA, including in the United States. These transfers rely on the EU–US Data Privacy Framework, under which Google LLC is certified, or, where that framework is not relied on, on the European Commission's Standard Contractual Clauses included in Google's data-processing terms.
Withdrawing consent
You can withdraw your consent at any time via Cookie Preferences in the website footer: GA4 stops immediately and its cookies (_ga, _ga_89V9DQPQH3) are deleted from your browser.
A listed provider does not mean every integration is active for every user. Some integrations are optional, environment-dependent, or initiated only when you connect the provider. We review the list against the deployed product and will update this policy when providers or purposes materially change.
8. Policy Updates
We update this policy when our storage technologies, providers, purposes, or legal obligations materially change. Where a change affects the scope of consent, we will request a new choice where required rather than treating an old consent as covering a new purpose.