Legal · Cookie policy

Three items total: two cookies and one local-storage entry.

The full list

NameTypePartyPurposeDuration
sb-access-tokenEssential · cookieFirst-party (Supabase processor)Supabase Auth session token. Without it, you cannot stay logged in.1 hour, auto-refreshed
sb-refresh-tokenEssential · cookieFirst-party (Supabase processor)Refreshes the access token without forcing you to sign in again.30 days
iww-themePreference · localStorageFirst-partyStores your light / dark / system theme choice in browser localStorage.Until you clear browser storage
  1. What is a cookie? What about local storage?

    A cookie is a small text file a site stores in your browser and sends back on every request. Local storage is a separate browser API for key-value data that stays in your browser but is never automatically sent to the server. We use cookies for session login and a single localStorage entry for your theme preference — both treated equally on this page even though the underlying mechanisms differ.
  2. What we use

    Three items total, listed in the table above: two session cookies set by Supabase Auth so we can identify you between page loads, plus one localStorage entry for your theme choice. Supabase is a first-party processor (cookies are set on the investwiseway.ca domain, not on a third-party domain like supabase.co). That is the entire list.
  3. What we do NOT use

    No advertising cookies. No third-party tracking pixels (Facebook Pixel, Google Ads, LinkedIn Insight, TikTok Pixel, etc.). No retargeting tags. No fingerprinting libraries. No analytics SDKs that ship data outside Canada. No A/B testing scripts that load third-party code.
  4. How to clear or block

    You can clear cookies and localStorage at any time from your browser settings. Blocking essential cookies will prevent you from logging in to your account, but it will not stop you from reading the public marketing pages. We do not show a cookie-consent banner because we set only essential cookies, which under PIPEDA and most provincial regimes do not require explicit opt-in consent — that said, you can disable them via your browser at any time.
  5. Do Not Track + Global Privacy Control

    We honour browser-level Do Not Track and Global Privacy Control signals where they apply. Because we do not run advertising or third-party trackers, the signals are largely redundant on our site, but we will not override them.
  6. Changes

    If we ever add a non-essential cookie or analytics tool, we will update this page and post a consent banner before the change goes live. Material changes get email notice to active members.
  7. Contact

    Questions about cookies or browser storage: security@investwiseway.ca. See our Privacy Policy for the broader data-handling picture.