Cookie Policy
Last updated: September 2026
1. What we use cookies for
webma uses a small, fixed set of cookies — no third-party advertising or cross-site tracking cookies, and no cookie consent banner is needed for the ones below since they're either strictly necessary or aren't used to track you across sites.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| Supabase auth session | Keeps you signed in. | Until you log out or it expires | Essential |
| webma_ref | Remembers a referral code between clicking a referral link and finishing signup. | 7 days | Functional |
2. What we don't use cookies for
Our own visitor and page-view analytics (used to show you traffic on sites you generate) are cookie-free by design — a visit is counted from a salted, one-way hash of IP address and browser, computed server-side and never linked back to an individual or stored as a persistent identifier on your device.
3. Sites you generate with webma
This policy covers webma.ai itself. A website you generate and publish is your own property and may set its own cookies depending on what you've built into it or what third-party embeds you've added — that's between you and your site's visitors, not covered here.
4. Managing cookies
You can clear or block cookies from your browser settings at any time. Blocking the authentication cookie will sign you out and prevent signing back in, since it's required for the service to work.