Cookie Policy

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work, to remember your preferences, and to provide information to site operators. We also use similar technologies such as local storage and pixels; we refer to all of these collectively as “cookies” in this policy.

This Cookie Policy is part of, and should be read together with, our Privacy Policy.

• Strictly necessary — required for the Service to function, including authentication and session management. Our authentication provider (Supabase) sets cookies to keep you signed in and to protect your session. These cannot be switched off through our consent controls.
• Functional— remember choices you make (such as your cookie-consent preference stored in your browser's local storage) to improve your experience.
• Analytics — help us understand how the Service is used so we can improve it. We use Google Analytics 4 for this, and these cookies are only set after you consent (see below).

With your consent, we use Google Analytics 4, a service provided by Google LLC, to understand how visitors find and use CodeCheck — for example which pages are viewed, which buttons are clicked, the path taken between pages, and roughly how long is spent on a page. This is a Google Analytics property that may be linked to a Google/Firebase project we operate. We use this only in aggregate to improve the product; we do not use it for advertising.

Google Analytics sets cookies such as:

• _ga — distinguishes unique visitors (typically expires after up to 2 years);
• _ga_<container-id> — persists session state for the property (typically up to 2 years);
• _gid, where used — distinguishes visitors over a short window (typically 24 hours).

We do not load Google Analytics until you opt in. The gtag.js library is only requested from Google after you accept analytics cookies, so until then no request — and therefore no IP address or device data — is sent to Google from your visit. Once loaded, we enable IP anonymization and run Google Consent Mode. Google acts as our processor for this data; see Google's Privacy Policy. You can also install Google's opt-out browser add-on to opt out of Google Analytics across all sites.

When you sign in, Supabase Auth stores session and refresh tokens (typically as cookies prefixed with sb-) so that you stay authenticated as you move between pages. These are strictly necessary; disabling them will prevent you from signing in and using your account.

We treat analytics as strictly opt-in. We do not intercept, record, or share the contents of your interactions with the Service for advertising, and we do not use session-replay, keystroke logging, or third-party advertising trackers. Non-essential analytics run only after you give consent through our banner, and you can withdraw that consent at any time using the button below.

We honor the Global Privacy Control (GPC). If your browser or extension sends a GPC signal, we automatically treat it as an opt-out of non-essential analytics and of any “sharing” of personal information, and Google Analytics will not load, unless you explicitly choose to accept on this site.

You can control cookies in the following ways:

• use our cookie consent banner to accept or reject non-essential cookies — you can reopen it any time with the button below to change or withdraw your consent;
• adjust your browser settings to block or delete cookies (note that blocking strictly necessary cookies may break the Service);
• clear your browser's local storage to reset your saved consent choice.

Open cookie settings

Because strictly necessary cookies are required to provide the Service, they are always active.

We may update this Cookie Policy as our practices or the technologies we use change. We will revise the “Last updated” date when we do.

Questions about our use of cookies can be sent to Dealer OS LLC at bekzod@dealer-os.io.