Cookie and local storage policy

Last updated: September 19, 2026

1. About this policy

This policy explains what the Looupe website stores in your browser to sign you in, remember your preferred appearance and let you resume certain actions. It supplements the Privacy Policy, which describes how accounts, content, recommendations and technical logs are processed.

2. Cookies and other storage

A cookie is a small piece of data stored by your browser and sent to the website with requests to which it applies. Looupe also uses local storage, which can persist between visits, and session storage, which belongs to a browser tab.

Unlike cookies, local and session storage are not automatically attached to every request. Looupe may read the information they contain to carry out an action you request, such as completing registration or publishing a draft.

Looupe uses Supabase for authentication. Sign-in cookies contain session data, including technical tokens and information associated with the signed-in user. They let the service recognize you and refresh your session when necessary.

Names: these generally start with sb- and include auth-token. They may be split into several parts. Some sign-in flows may also use verification cookies with names containing code-verifier.
Provider: Supabase, used by Looupe for authentication.
Retention: the current configuration sets an expiry of up to 400 days after a cookie is written or renewed. Your browser may enforce a shorter period. This does not guarantee that your session remains valid for that long: tokens and security rules have their own expiry conditions.
Control: you can sign out or delete website data in your browser. Blocking these cookies may prevent sign-in and access to account features.

Temporary verification cookies are removed when consumed by the intended flow. If that flow is interrupted, their retention depends on their expiry and your browser.

4. Website appearance

When you choose a light or dark theme, Looupe saves your choice in local storage as looupe-theme. Looupe uses this preference on your device. The website does not set an automatic expiry; it remains until replaced, deleted or cleared by the browser. Without a saved preference, the website uses your system appearance when available.

5. Post drafts

Looupe stores your post form draft locally so you can retrieve it. The entry starts with looupe:create-post: and includes your account identifier. It contains the selected community, title, text and comment setting; it does not store media files in this storage.

The draft has no automatic expiry. The form is designed to remove it when you publish or confirm that you want to discard it. You can also delete website data in your browser. Signing out does not guarantee that this draft is erased. On a shared device, clear local data after use if you do not want to leave it on the device.

6. Registration and returning to a requested page

looupe:onboarding-profile: temporarily stores information entered during registration, such as username, display name and, depending on the step, gender and date of birth. This information is submitted to create your profile when you complete registration.
looupe:post-auth-return: stores the internal page path to return to after registration.

Looupe uses these entries in the tab’s session storage. The registration flow is designed to remove them when no longer needed after completion. They normally disappear when the tab session ends, although some browsers may restore them with a previous tab or session. You can remove them by clearing website data.

7. Advertising, analytics and choices

The website currently contains no targeted advertising tool or audience analytics tracker added by Looupe. The storage described here supports the features you use. This does not mean the service processes no technical information: hosting, security and content personalization are described in the Privacy Policy.

If Looupe introduces optional trackers requiring consent, a separate choice will be offered before activation, with the ability to refuse and change that choice later. Accepting the Terms of Use does not provide blanket permission for those trackers.

8. Providers and external websites

Vercel hosts the website and Supabase provides authentication. Information sent to providers and possible processing outside Québec are described in the Privacy Policy and the Hosting and providers page. A provider’s involvement in the service does not necessarily mean it places a cookie in your browser.

If you open a link to another website, including an app store, that website’s policies and settings apply to your visit.

9. Managing browser data

In your browser’s privacy settings, find website data, select Looupe and use the delete option. Labels vary between browsers. You can also change your theme in Looupe and sign out of your account.

Deleting browser data may sign you out and remove preferences, drafts and registration progress. It does not delete your account or posts already saved on the servers. Account deletion is available through the relevant flow in Looupe settings.

10. Changes and contact

This policy will be updated when storage practices change. For questions, contact the person responsible for personal information protection, Mouhammadou Alioune Diaw: contact@looupe.ca.