Cookie Policy
Last updated 5 August 2026
Draft. This page has not been reviewed by a lawyer. The inventory below reflects what the current build actually loads.
This page lists everything Blog Craftly stores on your device or loads from a third party. We use both cookies and browser storage (localStorage); for simplicity we call all of it “cookies” here, since the rules that apply are the same.
Essential — no consent needed
These are required for the site to work. Without them you could not stay signed in, and we could not remember that you declined analytics. They are set without asking, as the rules permit for strictly necessary storage.
| Name | Set by | Purpose | Retained |
|---|---|---|---|
Supabase auth session | Supabase | Keeps you signed in between page loads and refreshes your session token. | Until you sign out or the session expires |
theme | Blog Craftly | Remembers whether you chose light or dark mode. | Until you clear site data |
cookie-consent | Blog Craftly | Records your answer to the cookie banner so we do not ask again — and so analytics stays off if you said no. | Until you clear site data |
Analytics — only with your consent
These are off by default. Before the Google Analytics script is loaded we set Google Consent Mode to deny analytics_storage, ad_storage, ad_user_data, and ad_personalization. Nothing is written unless you press Accept on the banner. If you press Reject, consent stays denied and no analytics cookie is created.
| Name | Set by | Purpose | Retained |
|---|---|---|---|
_ga, _ga_* | Google Analytics 4 (G-9MBH9VVTMW) | Distinguishes visitors and sessions so we can see which pages get used. Only set after you press Accept. | Up to 2 years |
_clck, _clsk | Microsoft Clarity (xxb8hz31nd) | Links session replays and heatmaps to a visitor and to the current session. The Clarity tag is only loaded after you press Accept. | _clck up to 1 year, _clsk 1 day |
We do not use advertising or cross-site tracking cookies, and we do not sell personal data.
Third parties that load before you choose
Two things run regardless of your cookie choice. We are listing them explicitly rather than leaving them out, because both involve data reaching a third party:
- Sentry (error monitoring and session replay). We use Sentry to catch crashes. It also records a replay of roughly 1 in 10 sessions, and of any session where an error occurs, so we can see what led to a bug. Replays are captured with all text masked and all media blocked, so the words you type and the drafts you generate are not transmitted — what we get is layout and interaction shape. Sentry receives your IP address and browser details. This currently runs without waiting for cookie consent.
- Google Fonts. Our typefaces are loaded from Google's CDN, which means your browser contacts
fonts.googleapis.comandfonts.gstatic.comand Google receives your IP address. No cookie is set by this request.
If you would prefer either of these to be consent-gated, tell us at [email protected].
Other processors
Some third parties receive data as part of running the service, but do not set cookies in your browser: our hosting and database provider, our email delivery provider, our payment processor (which sets its own cookies only on its hosted checkout pages), and the AI model providers that generate drafts. These are covered in the Privacy Policy.
Changing your mind
Your choice is stored in this site's browser storage under cookie-consent. To change it, clear this site's data in your browser — the banner will appear again on your next visit and you can answer differently. You can also block or delete cookies entirely in your browser settings, though blocking essential storage will stop you being able to sign in.
Changes to this policy
If we add or remove a cookie or tracker we will update this page and the date above, and ask for consent again where required.