Cookies policy
Effective 2026-09-01
1. What cookies are
Cookies are small text files stored in your browser when you visit a website. Northline Ops uses cookies to keep you signed in, remember your preferences, and, with your consent, to understand how the product is used.
2. Cookie categories
We use four categories. Only the first is set automatically; the others require your explicit opt-in through the cookie preferences modal.
2.1 Strictly necessary, always on
Required to run the core service, keeping you signed in, protecting against certain attacks, and recording your consent choice itself. The service cannot function without these cookies.
| Name | Purpose | Lifetime | Type |
|---|---|---|---|
sb-*-auth-token | Supabase authentication session | Session / rolling refresh | First-party, httpOnly |
northline_consent | Records your cookie consent choices and the policy version | 12 months | First-party |
2.2 Preferences, opt-in
Remembers small UI choices so you don't have to repeat them. Nothing personal is stored.
| Name | Purpose | Lifetime |
|---|---|---|
nl-theme | Your theme preference (dark, light, or system) | localStorage (persistent) |
2.3 Analytics, opt-in, default off
Aggregated feature-usage counts so we understand which parts of the product are actually useful. We never collect the content of your records through analytics. We do not use analytics data for advertising.
| Name | Purpose | Lifetime |
|---|---|---|
nl_attribution | UTM parameters and landing page for marketing attribution | Session (sessionStorage) |
nl_signup_source | Marketing attribution context carried to the sign-up flow | 30 days |
2.4 Browser push, opt-in, default off
Lets Northline register your browser for push notifications through OneSignal. The OneSignal SDK is loaded only after you opt in, it is not present on the page until then.
3. Third-party cookies
When you interact with embedded third-party services (Stripe Checkout, Razorpay Checkout, Google sign-in), those providers may set their own cookies under their own domain and privacy policies. We do not control these cookies.
4. Managing your choices
On your first visit you are shown a cookie banner. You may:
- Accept all, enables all four categories.
- Reject optional, keeps only strictly necessary cookies.
- Manage, opens a modal where you can toggle each optional category individually.
You can change your mind at any time by clicking Manage cookies in the site footer. Rejecting optional cookies does not degrade the core service.
5. Do Not Track
Where a browser sends a Do Not Track (DNT) signal, we treat it as equivalent to rejecting optional cookies for that session.
6. Consent versioning
The northline_consent cookie includes a policy version number. When we materially update this Cookies Policy the version is bumped, which re-opens the consent banner for returning visitors so they can review the changes.
7. Browser-level controls
Most browsers allow you to block or delete cookies through their settings. Be aware that blocking strictly necessary cookies will prevent you from signing in.
8. Changes to this policy
Material changes to this Cookies Policy are communicated via the consent version bump described above. The effective date at the top of this page indicates the most recent revision.
9. Contact
Questions about cookies: privacy@northlineops.com.