The short version: we set four cookies, all of them strictly necessary, and we do not track you. Here is the full list and why each one exists.
1. Why there is no cookie banner
Spanish law (Article 22.2 of Law 34/2002, LSSI-CE) requires your consent before a site stores anything on your device — unless it is needed only to carry the communication, or is strictly necessary to provide a service you actually asked for.
Everything we store falls in that second category. We keep you signed in, and we protect the handful of moments where you connect an outside account. That is the whole list. We run no analytics tags, no advertising pixels, no session-replay recorder and no third-party trackers, so there is nothing to ask you about.
If that ever changes we will put a proper banner in place first, with a “reject” button exactly as easy to find and press as “accept”, as the AEPD's cookie guidance requires.
2. The cookies we actually set
| Cookie | Purpose | Lifetime | Type |
|---|
| sb-… (Supabase auth) | Keeps you signed in and refreshes your session. Without it you would be logged out on every page. | Session and refresh tokens, renewed while you use the product | Strictly necessary |
| slack_oauth_state | Anti-forgery token, set only while you are connecting a Slack workspace. | 10 minutes | Strictly necessary |
| notion_oauth_state | Anti-forgery token, set only while you are connecting Notion. | 10 minutes | Strictly necessary |
| shopify_oauth_state | Anti-forgery token, set only while you are connecting a Shopify store. | 10 minutes | Strictly necessary |
3. Things stored on your device that are not cookies
- Theme preference. Your light or dark choice is kept in your browser's local storage. It never leaves your device and we never see it.
- Editor working files. The image and video editors cache material in your browser so a large project does not have to be re-downloaded constantly. This is your own content, held locally.
- An AI model file, in one place. One editing feature runs a small audio model inside your browser rather than on a server. Your audio never leaves your device for it; the model file itself is downloaded once and cached.
You can clear all of this at any time from your browser's settings.
4. Third parties
We do not embed advertising or social widgets, and our web fonts are served from our own domain rather than fetched from Google, so loading a page does not tell anyone else that you visited.
We do use an error-monitoring service, Sentry, which records crashes so we can fix them. It does not set cookies and does not track you across sites, but an error report does include your IP address and technical details of the request. That is covered in the privacy policy.
5. Turning cookies off
Every browser lets you block or delete cookies. Because ours are the ones that keep you signed in, blocking them will stop you being able to log in at all — there is no version of the product that works without them.
6. Questions and changes
Write to [[ OWNER: privacy contact email ]]. We will re-check this page whenever we add a tool that touches the browser, and in any case at least every two years, as the AEPD recommends.