Cookie Policy

Capsulated uses a small number of essential cookies that are required for the service to function. Essential cookies cannot be disabled without breaking sign-in or core security:

• Authentication session cookies — issued by Supabase to keep you signed in across page loads. These store an opaque session identifier and expire when you sign out or after a period of inactivity. They never contain vault content.
• CSRF protection tokens — small, short-lived tokens that protect against cross-site request forgery on form submissions and sensitive actions.
• Locale preference — a single cookie remembering which language version of the site you prefer (e.g. NEXT_LOCALE=en).

We do not use analytics cookies.

As of the “Last updated” date below, Capsulated does not run any third-party analytics platform — no Google Analytics, no Vercel Analytics, no Plausible, no Mixpanel, no PostHog, no Fathom, no Hotjar, no Segment, no behavioural heatmap tool of any kind.

We do keep aggregate, non-identifying server-side metrics — numbers like “how many sign-ups happened today” or “how much storage is in use across the platform” — which never set browser cookies and never identify individual users. If we ever introduce client-side analytics, we will update this page first, give 30 days' notice by email, and only ever use a privacy-respecting tool that does not build user profiles.

We will never use advertising cookies.

This is not a current state — it is a foundational principle of Capsulated. We do not run advertising on this product, do not embed marketing pixels (no Meta Pixel, no Google Ads tag, no TikTok tracker), do not participate in attribution networks, and do not sell or share any data with advertisers or data brokers. There is no business model here that involves your attention.

Most browsers let you view, manage, and clear cookies. Disabling our essential cookies will sign you out and prevent the service from working — but the option is always available.

• Chrome — Settings → Privacy and security → Cookies and other site data
• Safari — Settings → Privacy → Manage Website Data
• Firefox — Settings → Privacy & Security → Cookies and Site Data
• Edge — Settings → Cookies and site permissions → Manage and delete cookies
• Mobile browsers — see your browser's app settings; most mobile browsers expose the same controls under Privacy or Settings.

Questions about how we use cookies? Email privacy@capsulated.app. For broader privacy questions, see our Privacy Policy.