Cookie Policy

Bob Van LLC operates GroupDex. GroupDex uses essential authentication/session storage so the app works and Google Analytics cookies so we can understand aggregate product and website usage. We do not use advertising cookies, retargeting pixels, or sell/share cookie data for third-party advertising.

GroupDex uses Supabase browser session storage and a GroupDex HTTP-only authentication cookie so you can stay signed in, open GroupDex in a new tab, and access private API routes. These controls are required for the service to work and are not used for advertising.

• The GroupDex server cookie is used for authentication and is configured as HTTP-only, Secure in production, SameSite=Lax, and scoped to GroupDex.
• Supabase browser session storage supports the signed-in web experience and token refresh flow.

Notification preferences are stored in your GroupDex account settings. Browser push subscriptions are stored only after you enable browser notifications. Push subscriptions are not advertising cookies.

GroupDex uses Google Analytics 4 to measure aggregate usage, such as pages visited, referring sources, approximate region, browser/device information, and feature engagement. Google Analytics may set cookies such as _ga and _ga_* to distinguish visits and sessions. These cookies are used for product and site measurement, not third-party advertising.

You can clear cookies and site data in your browser. Clearing essential GroupDex storage may sign you out or require you to sign in again. You can also sign out from the app to clear the GroupDex server session cookie. Blocking analytics cookies should not prevent the core app from working.

Cookie questions can be sent to privacy@groupdex.app.