Strictly necessary cookies
These cookies are required for the site to function. They cannot be disabled without breaking core functionality.
Supabase Auth session
Authenticated areas (admin panel, buyer account, SaaS app)
Admin MFA cookie (ms_admin_mfa)
Admin two-factor authentication state
Cookie consent preference (localStorage)
Stores your cookie consent choice
Analytics cookies (when Google Analytics is enabled)
When the operator configures NEXT_PUBLIC_GA_MEASUREMENT_ID, GA4 is loaded as a deferred script and uses the cookies below. Without that env var, only Plausible Analytics runs — entirely cookieless.
| Cookie | Provider | Purpose | Retention |
|---|---|---|---|
_ga | Google Analytics | User identifier for analytics | 14 months (default; configurable in GA4 Admin) |
_ga_* | Google Analytics | Session data for the specific GA4 property | 14 months |
Opt-out paths for GA4
- Browser ad blocker (uBlock Origin, Ghostery)
- Google Analytics opt-out browser add-on ↗
- Enable Do Not Track (DNT) or Global Privacy Control (GPC) in your browser — we respect these signals.
How to manage cookies
Most browsers allow you to view, delete, and block cookies. Disabling strictly necessary cookies will impair site functionality.