Cookie Policy
Last updated: May 3, 2026
This Cookie Policy explains what cookies and similar storage technologies (collectively "Storage") are used by the Contexo dashboard (contexo.ai) and the embeddable chat widget that customers install on their own websites. Read it together with our Privacy Policy.
1. What Storage we use
Contexo intentionally keeps Storage minimal. We do not use cookies for advertising, cross-site tracking, retargeting, or third-party analytics in our dashboard or widget.
1.1 Dashboard (contexo.ai)
| Name | Type | Purpose | Retention |
|---|---|---|---|
sb-*-auth-token | Cookie / localStorage (Supabase) | Strictly necessary. Stores your authenticated session so you do not have to log in on every page. | Until you log out or the session expires. |
sb-*-refresh-token | Cookie / localStorage (Supabase) | Strictly necessary. Used to silently refresh expired access tokens. | Until you log out. |
| Theme / UI preferences | localStorage | Functional. Remembers your dashboard preferences (e.g. dark mode) between visits. | Persistent until you clear your browser storage. |
1.2 Embeddable widget (loaded on customer websites)
| Name | Type | Purpose | Retention |
|---|---|---|---|
chatforge_session_id | sessionStorage | Strictly necessary. Maintains continuity of a single conversation while the visitor browses the site. Signed cryptographically to prevent tampering. | Cleared automatically when the visitor closes the browser tab. |
The widget does not set persistent cookies, does not load any third-party advertising or analytics scripts, and does not fingerprint the visitor.
2. Categories under EU/UK law
- Strictly necessary:Supabase auth tokens and the widget's session identifier. These cannot be disabled without breaking the Service. Under EU/UK ePrivacy rules, prior consent is not required for strictly-necessary Storage.
- Functional: Dashboard UI preferences. Removing them only resets your preferences.
- Analytics, marketing, advertising: None used by us at this time.
3. Visitor IP addresses
When a visitor sends a message through a widget we record a SHA-256 hash of their IP address for rate-limiting and abuse-prevention. We do not store the raw IP address, and the hash is not used to track visitors across sites.
4. Customer obligations
If you embed the Contexo widget on your website you remain responsible for the cookie / storage banner and consent experience presented to your visitors under GDPR, the EU ePrivacy Directive, the UK PECR, the DPDP Act, and similar laws. Even though our widget's Storage is strictly necessary, your local regulator may still require disclosure.
5. How to control Storage
You can clear cookies and local/session storage from your browser settings or via your browser's privacy controls. Doing so will log you out of the dashboard and reset any stored preferences. The widget will simply start a new conversation on the visitor's next message.
Browser instructions:
6. Changes to this Policy
We will update this page when our use of Storage changes. The "Last updated" date above always reflects the latest revision.
7. Contact
Questions about cookies or storage: privacy@contexo.ai.