Cookie Policy

Effective Date: July 20, 2026

1. What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work efficiently and to provide information to the website owner. Some cookies are essential for the site to function; others help us understand how visitors use the site.

2. Cookies We Use

STRVend uses the following categories of cookies:

Strictly Necessary

always active

Required for the platform to function. These cannot be disabled.

Cookie name	Purpose	Expiry
sb-access-token	Supabase authentication — maintains your login session.	Session / token lifetime
sb-refresh-token	Supabase auth — used to refresh your access token silently.	Up to 7 days
sb-auth-token	Tracks authentication state client-side.	Session

Functional

functional

Enable enhanced functionality and personalization.

Cookie name	Purpose	Expiry
__Host-next-auth.csrf-token	CSRF protection — prevents cross-site request forgery.	Session

Payment (Stripe)

third-party

Set by Stripe during payment and Stripe Connect flows. Governed by Stripe's Cookie Policy.

Cookie name	Purpose	Expiry
__stripe_mid	Stripe machine identifier for fraud prevention.	1 year
__stripe_sid	Stripe session identifier.	30 minutes

Analytics: STRVend currently tracks vendor profile view counts via server-side logging only. We do not use third-party analytics cookies (such as Google Analytics). If we add analytics tools in the future, we will update this policy and obtain appropriate consent.

3. How to Control Cookies

Browser settings

Most browsers let you refuse or delete cookies. Visit your browser's help pages for instructions. Disabling strictly necessary cookies will prevent you from logging in to STRVend.

Stripe

Manage Stripe cookie preferences at stripe.com/cookie-settings.

4. Updates to This Policy

We may update this Cookie Policy when we change our use of cookies. The effective date at the top of this page reflects the date of the most recent update.

5. Contact

Questions about cookies? Email us at legal@strvend.com.