Cookie Policy

1. What this page covers

This policy explains the cookies and similar technologies (localStorage, sessionStorage, IndexedDB) we use on theaccessible.org. It supplements our Privacy Policy.

"Cookie" on this page means any of these browser-storage mechanisms, not just HTTP cookies strictly speaking — the privacy implications are the same.

2. What we do not use

• No advertising cookies. We do not run display advertising and we do not participate in ad networks.
• No cross-site tracking. We do not place third-party cookies that follow you across other websites.
• No social-media pixels. We do not embed Facebook, LinkedIn, X/Twitter, or similar tracking pixels.
• No session-replay tools. We do not record your mouse movements, clicks, or keystrokes for product-analytics purposes.

3. What we do use

We use three categories of cookies. All are either strictly necessary to provide the Service or functional to remember your choices. None are used for cross-site tracking.

3.1 Strictly necessary

These cookies make the Service work. You cannot disable them without breaking sign-in or checkout.

Name	Set by	Purpose	Duration
sb-*-auth-token	theaccessible.org	Supabase auth session (ID + refresh token)	Session / up to 7 days (rolling)
__cf_bm	Cloudflare	Bot management and abuse mitigation	30 minutes (rolling)
cf_clearance	Cloudflare	Challenge-passed marker (only set if a challenge was served)	30 days
__stripe_mid / __stripe_sid	Stripe (payment pages only)	Fraud prevention during checkout	__stripe_mid: 1 year · __stripe_sid: 30 minutes

Without these, sign-in, session persistence, DDoS protection, or payment processing cannot function.

3.2 Functional

These remember your preferences. You can clear them from your browser settings without breaking core functionality.

Name	Set by	Purpose	Duration
theme	theaccessible.org (localStorage)	Remembers your light/dark-mode choice	Until cleared
accessibility-preferences	theaccessible.org (localStorage)	Remembers motion, contrast, and font-size preferences	Until cleared
last-viewed-document	theaccessible.org (localStorage)	Restores your last-viewed conversion on return	Until cleared

3.3 Analytics

We do not set analytics cookies. Server-side request logs, retained per our Data Retention Policy, give us aggregate traffic information without placing cookies in your browser.

4. Third-party cookies

The only third parties whose cookies appear on theaccessible.org are:

• Cloudflare — set on the edge for bot protection and challenge clearance (see §3.1).
• Stripe — set only on payment / billing pages for fraud prevention (see §3.1).

Both are described in our Subprocessors list.

5. How to control cookies

• Your browser — every major browser lets you view, block, and delete cookies for any site. Consult your browser's help for specifics. Most browsers also offer "private" or "incognito" windows that discard all cookies on exit.
• Do Not Track / Global Privacy Control — we do not currently sell or share personal information under CCPA/CPRA, so opting out of those categories is effectively automatic. If you send your preference via GPC, DNT, or any other signal, we treat it as an opt-out for any future processing that would qualify.
• Opting out of functional cookies — clear them from your browser's site-data settings. The Service continues to work; you will simply lose any saved preferences.
• Strictly necessary cookies cannot be disabled without breaking the Service. Don't use the Service if this is unacceptable to you.

We do not use a cookie-consent banner because we do not set any non-necessary, non-functional cookies that would require one under GDPR/ePrivacy. If we ever introduce cookies that require consent, we will put a banner in place and update this policy 30 days in advance.

6. Changes

We will update this page as our use of cookies changes. The effective date appears at the top of this page. Prior versions remain available from the version history link below.

7. Contact

Questions about cookies: privacy@theaccessible.org.