Document ID: WST-POL-COOK-v1.0 · Effective Date: 2 May 2026 · Governing Law: Delaware, USA
This Cookie Policy explains how Workestra LLC ("Workestra", "we", "us") uses cookies and similar tracking technologies on workestra.app and within the Workestra application (collectively, the "Service"). It should be read alongside our Privacy Policy.
1. What Are Cookies?
Cookies are small text files placed on your device when you visit a website or use a web application. They allow the Service to recognize your device and remember information about your visit, such as your authentication state, workspace selection, or theme preference. We also use closely related browser technologies such as localStorage, sessionStorage, and IndexedDB to provide a fast, reliable experience.
2. Categories of Cookies We Use
2.1 Strictly Necessary
Required for the Service to function. They cannot be disabled without breaking sign-in, workspace switching, and core navigation.
| Cookie / storage | Purpose | Duration |
|---|---|---|
Supabase auth session (sb-*-auth-token) | Authenticates your account | Session / persistent if "remember me" |
workestra-active-workspace | Tracks the workspace you are currently viewing | Up to 1 year |
| CSRF / anti-forgery tokens | Protects against cross-site request forgery | Session |
2.2 Functional
Remember your preferences to improve usability.
| Cookie / storage | Purpose | Duration |
|---|---|---|
theme | Stores your light/dark mode preference | 1 year |
sidebar-state | Remembers whether the sidebar is collapsed | 1 year |
recent-views | Powers "recently viewed" lists in modules | 90 days |
2.3 Performance and Analytics
Help us understand aggregate usage so we can improve the Service. Where required by law, these are loaded only after you give consent.
| Cookie / tool | Purpose | Duration |
|---|---|---|
| Vercel Analytics | Aggregated, privacy-friendly page-view metrics for workestra.app | Up to 1 year |
| Sentry session replay (where enabled) | Diagnoses production errors via redacted session reconstruction | Up to 90 days |
2.4 Marketing
Workestra does not currently use advertising, retargeting, or cross-site tracking cookies. If we ever do, we will list them here and require explicit opt-in where required by law.
3. Third-Party Cookies from Integrations
When you connect a third-party integration (Google, Microsoft, Slack, Stripe, Mollie, etc.), the third party may set its own cookies subject to its own policies. We do not control those cookies. Disconnecting the integration removes Workestra's access but does not always clear the third party's own cookies — refer to that provider's documentation.
4. Consent
When required by law (for example for visitors located in the EEA, UK, or Switzerland), we present a consent banner before loading non-essential cookies. You can change your preferences at any time using the link at the bottom of workestra.app or by clearing your browser cookies. Strictly necessary cookies do not require consent.
Note: A consent management interface may be progressively rolled out. Until then, you can manage cookies via your browser settings (see Section 5).
5. Managing Cookies in Your Browser
Most browsers allow you to block, delete, or manage cookies through their settings:
| Browser | Cookie Settings Location |
|---|---|
| Chrome | Settings → Privacy and Security → Cookies and other site data |
| Firefox | Settings → Privacy & Security → Cookies and Site Data |
| Safari | Preferences → Privacy → Manage Website Data |
| Edge | Settings → Cookies and Site Permissions |
Disabling strictly necessary cookies will prevent you from signing in or using the Service. Disabling functional cookies will reset preferences each visit.
6. Do Not Track and Global Privacy Control
Workestra honors the Global Privacy Control (GPC) signal where applicable. When we detect a GPC signal, we treat it as an opt-out of any "sale" or "share" of personal information under California law. Because Workestra does not sell or share personal information, this primarily affects analytics behavior.
7. Updates to This Policy
We may update this Cookie Policy to reflect changes in our practices or applicable law. We will update the version number and effective date when we do.
Policy Changelog
| Version | Date | Summary |
|---|---|---|
| v1.0 | 2026-05-02 | Initial publication |