Cookie Policy

A cookie is a small text file that a website stores on your device. When you return, your browser sends the cookie back, which lets the site recognize your session and remember basic state. Local storage is a related browser technology that lets a web app save data (such as settings and layouts) directly on your device, without sending it back to the server on every request.

We use the term “cookies” loosely in this policy to cover cookies and these similar technologies, including local storage and session storage. They serve different purposes, but all of them store a small amount of information in your browser.

We group what we store into four categories. Only the first two are set without asking you; the last two need your consent first, and nothing in them loads, stores or sends data before you give it.

• Strictly necessary (always on). Authentication cookies from our backend provider (Supabase, names starting sb-) that keep you signed in for up to about a month; obelion_session, which ties your login to a device so we can enforce device limits; obelion_remember, your “keep me signed in” choice; a short-lived security token during Discord linking; and obelion_consent, which records the choice you made in the cookie banner for six months.
• Functional (always on). Your chart layouts, watchlists and interface preferences, mostly in local storage on your device, plus obelion_last_section, which returns you to the part of the platform you last used.
• Analytics (only with consent). PostHog product analytics and session replay (cookies and storage starting ph_, kept up to a year), which record pages visited, clicks and an approximate replay of the screen so we can find bugs and confusing flows. Text you type into fields is masked, and chart canvases are not captured. Data is processed by PostHog Inc. in the United States. Also obln_sid, a random id that keeps you in the same A/B test group for a year.
• Referrals (only with consent). obelion_ref remembers a partner’s referral code for 30 days so the partner is credited if you sign up later. Without consent the code is kept only until you close your browser, long enough to finish a sign-up you started from that link.

We do not use cookies for third-party advertising or to build cross-site advertising profiles, and if your browser sends a Global Privacy Control signal we treat it as a refusal of referral tracking.

Some providers we rely on may set their own cookies that are necessary for their function. For example, our payment processor (Stripe) may set cookies to process payments and prevent fraud, and our authentication and backend provider (Supabase) may set cookies needed to maintain your session. These cookies are governed by each provider’s own policies.

We encourage you to review the cookie and privacy policies published by these providers on their respective websites to understand how they use cookies in connection with their services.

Open Cookie settings in the footer of any page to accept, refuse or withdraw consent for analytics and referrals at any time. Withdrawing stops collection immediately and deletes the analytics cookies and storage from your browser. We ask again after six months.

You can also block or delete cookies and clear local storage in your browser settings. Clearing local storage resets saved preferences such as chart layouts and may sign you out, and blocking strictly necessary cookies will break sign-in.

We may update this Cookie Policy from time to time. When we do, we will post the revised version here with a new date. For a broader explanation of how we handle your data, please see our Privacy Policy.