Cookie & Tracking Policy
What Mendli stores in your browser, what is necessary, and how optional tracking will be handled.
1. Our current approach
Mendli currently uses only technologies that are necessary to run, secure and remember the service in the current production build. We do not intentionally set advertising or behavioural analytics cookies on the public site at this time.
2. What counts as a cookie or similar technology?
Cookies are small files stored by a browser. Similar technologies include local storage, session storage and other identifiers used to remember authentication, preferences or security state.
3. Technologies Mendli may use
| Category | Purpose | Consent? |
|---|---|---|
| Strictly necessary | Authentication, security, session continuity, fraud prevention, load/security controls and remembering essential UI state. | Normally no opt-in required where genuinely necessary, but we still explain their use. |
| Preferences | Remembering choices such as saved workers, dismissal of the cookie notice or display preferences. | Used only where proportionate; optional preference storage is kept separate from advertising. |
| Analytics | Measuring traffic or product usage. | Off by default in the current build. If introduced and consent is required, it will not run before consent. |
| Advertising/marketing tracking | Behavioural advertising, cross-site tracking or marketing attribution. | Not used in the current build. If introduced, appropriate consent will be obtained first. |
4. Service providers
Supabase authentication can use browser storage to keep users signed in. Cloudflare may use strictly necessary security technologies depending on the security configuration and traffic presented to the site. These are not used by Mendli to build advertising profiles.
5. Your choices
You can block or clear browser cookies/storage using your browser settings, but blocking strictly necessary authentication/storage may stop sign-in or other Mendli functions from working. If Mendli adds optional analytics or marketing tracking later, a consent control will be provided before those technologies are enabled.