Cookie and Tracking Notice

Dersoma uses browser storage (localStorage, sessionStorage), service worker caches, and similar technologies. Strictly necessary storage supports features you request (sign-in, reminders, analysis history on your device). We do not use third-party advertising cookies in the core product.

1. Essential Storage (examples)

• Supabase Auth session — keeps you signed in (managed by Supabase client libraries).
• Dersoma_analysis_history — premium/free analysis history on your device (localStorage).
• Dersoma_device_id — anonymous device identifier for reminder settings (localStorage).
• Session storage keys for check-in questionnaire/results during a visit.
• Service worker assets for PWA/offline behaviour where the browser enables it.

This storage is necessary for the app to function as designed. If you block it, some features may not work.

2. Analytics and Performance

We do not currently run non-essential analytics (e.g. Google Analytics) in the production app. If we add them, we will update this notice and obtain consent where EU/EEA law requires.

3. Push Notifications

Push is sent only after browser permission. You can revoke permission in device/browser settings. Enabling push stores subscription data on our servers (see Privacy Policy).

4. Payments (Stripe)

Stripe Checkout and the billing portal set cookies on Stripe domains under Stripe's policies, not Dersoma's.

5. Abuse Prevention

Our servers may process IP addresses for rate limiting and security (see Privacy Policy). This is not stored in your browser as an advertising cookie.