Trust & information · Updated 28 October 2026

Cookies & browser storage

How sign-in, saved preferences and local progress use browser storage.

Sign-in cookies

Supabase sign-in uses cookies with names beginning sb-. They contain session state and, during supported flows, a code verifier. Cookie settings use the current website origin. Treat a signed-in browser as sensitive; session storage is not a claim of encryption against someone who can access your browser.

Cookie lifetime and token renewal follow the configured authentication service. Signing out or clearing browser cookies ends browser access, although account deletion and file retention are separate operations.

Browser storage

  • Account-scoped bookmark markers help other tabs refresh your saved items. Bookmarks and their count come from your account in the database.
  • Guide checklists may use account-scoped or guest browser storage. Clearing it can remove browser-only progress.
  • Discovery uses session storage to restore browsing position, while filters remain in the page URL.
  • Optional discovery preferences and opted-in reminders are saved to your account when you choose to save them.

Diagnostics

Production error monitoring may send filtered error information to Sentry when enabled. Session replay is disabled; the application removes identity, credentials, HTTP bodies and private file links. SideWinn does not use this integration to display fictional earnings or activity.

The website records limited signed-in discovery actions and progress for its operating metrics. Proof bytes and free-form evidence are not analytics payloads.

Browser controls

Use your browser settings to inspect or clear cookies and site storage. Blocking all storage can interrupt sign-in and browser-only progress. Public information remains readable, and interactive features show recoverable errors when their dependencies are unavailable.

External providers have their own cookie and privacy practices after you leave SideWinn.

Questions or help

Contact support@sidewinn.live. Include only the information needed to explain the issue; never send passwords or one-time codes.