Cookie Policy
Last updated: April 2026
1. What Are Cookies
Cookies are small text files that websites store on your device when you visit them. They help the site remember your preferences, keep you signed in, and understand how you interact with the service. Cookies can be “session” cookies (deleted when you close your browser) or “persistent” cookies (stored until they expire or you delete them).
2. How We Use Cookies
Lumoza uses essential cookies that are strictly necessary to operate the platform (authentication, fraud prevention) and analytics cookies to understand how visitors discover and use the marketing site. We do not use advertising cookies. We do not share analytics data with third-party advertisers.
Analytics cookies are set only if you accept them via the consent banner. If you reject or ignore the banner, Google Consent Mode v2 keeps analytics storage denied — no identifying cookies are written and only anonymous, aggregated pings are sent for traffic modelling.
3. Cookies We Use
The table below lists every cookie that Lumoza or its service providers may set when you use the platform.
| Cookie | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
sb-*-auth-token | Supabase | Stores your authentication session so you stay signed in across page loads | Session / 30 days | Essential |
sb-*-auth-token-code-verifier | Supabase | Used during the PKCE (Proof Key for Code Exchange) OAuth flow to verify the authentication handshake | Session | Essential |
__stripe_mid | Stripe | Identifies your device for fraud prevention during payment processing | 1 year | Essential |
__stripe_sid | Stripe | Identifies your browsing session for fraud prevention during payment processing | 30 minutes | Essential |
lumoza_consent | Lumoza | Remembers your consent banner choice (accept or reject analytics). Stored in localStorage, not a cookie. | Until cleared | Essential |
_ga | Google Analytics | Distinguishes unique visitors. Set only if you accept analytics. | 2 years | Analytics |
_ga_* | Google Analytics | Persists session state for a specific GA4 property. Set only if you accept analytics. | 2 years | Analytics |
The sb-* pattern means the cookie name includes your project identifier (e.g., sb-abc123-auth-token). This is standard Supabase behaviour and does not indicate additional data collection.
4. Managing Cookies
Most browsers let you view, manage, and delete cookies through their settings. You can typically find these options under “Privacy” or “Security” in your browser preferences. Here are links to cookie management guides for common browsers:
- Chrome: Settings → Privacy and Security → Cookies
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy → Manage Website Data
- Edge: Settings → Cookies and Site Permissions
Please note that if you block or delete the essential cookies listed above, you will not be able to sign in to Lumoza or complete payments. The platform requires these cookies to function.
5. Third-Party Cookies
Lumoza loads two third-party services on the marketing site:
- Google Tag Manager & Google Analytics 4 — used to understand how visitors discover and use our site. Loaded through a single Google Tag Manager container. Analytics cookies (
_ga,_ga_*) are set only if you accept via the consent banner; otherwise Consent Mode v2 keeps them disabled and only anonymous, aggregated pings are sent. Governed by Google's Privacy Policy. - Stripe — when you interact with the Stripe checkout flow, Stripe may load its payment form inside an iframe on our site. This iframe may set the
__stripe_midand__stripe_sidcookies listed above. These cookies are used solely for fraud prevention and are governed by Stripe's Privacy Policy.
We do not set any advertising cookies, and we do not use Facebook Pixel, LinkedIn Insight Tag, or any third-party ad-tracking services.
6. Changes to This Policy
We may update this Cookie Policy from time to time to reflect changes in the cookies we use or for legal and regulatory reasons. When we make changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically.
7. Contact
If you have questions about our use of cookies, contact us at privacy@lumoza.ai.