Cookie Policy
Last updated: October 1, 2026
1. The Short Version
We use a few essential cookies to sign you in and keep your account secure. With your permission only, we also use advertising cookies from Meta and Google to measure which of our ads bring people to Chat Cobalt. You choose on the cookie bar, and you can change your mind at any time in section 5.
2. What Cookies Are
Cookies are small text files a website stores on your device so it can recognise you on your next request — without one, you'd be logged out on every page you clicked. Browsers also offer local storage, which works similarly. We use both, and both are covered by this policy.
3. Cookies We Set
| Name | What it's for | How long it lasts |
|---|---|---|
sb-…-auth-token | Keeps you signed in to your dashboard. Set by Supabase, our authentication provider. | Your session, refreshed while you stay active |
cc_device | Remembers that you've already confirmed this device, so we don't email you a verification code every single time you log in. We store only a one-way hash of it on our side, never the value itself. | 180 days |
cc_admin_session | Signs in the Chat Cobalt team to our own internal admin area. Never set on a customer's browser. | 12 hours |
All three are strictly necessary. Blocking them means you cannot log in at all.
4. Local Storage We Use
| Name | What it's for | How long it lasts |
|---|---|---|
cc-consent-v2 | Remembers your choice on the cookie bar (ad cookies allowed, or essential only). | Until you clear your browser data |
cc-first-touch | Remembers the address you first arrived on (for example which ad or post you came from), and is sent with your signup so we know what brought you. It stays on our own systems and is never shared. | Until you clear your browser data |
chatcobalt_session_… | Identifies your conversation with the chat widget so replies stay in context, and so you aren't asked to confirm your details again on a later visit. It holds a random ID — no name, email or phone number. | Until you clear your browser data |
5. Advertising Cookies (only if you accept)
These are set by Meta and Google, and only after you press “Accept”. They tell us when someone who saw one of our ads visits, signs up or adds billing, so we can stop paying for ads that don't work. They are never set by a customer's chat widget, and never on our agency partners' websites.
| Name | What it's for | How long it lasts |
|---|---|---|
_fbp | Meta (Facebook / Instagram) Pixel: measures visits and signups from our Meta ads. | 90 days |
Your choice: not chosen yet
A change applies from the next page you open.
We never sell what's stored here.
6. The Chat Widget on Our Customers' Websites
Chat Cobalt customers add our chat widget to their own websites. On those sites the widget stores one item, chatcobalt_session_…, in the visitor's local storage — the same random conversation ID described above. It sets no cookies and no tracking identifiers, and it cannot follow anyone from one customer's website to another.
If you're a Chat Cobalt customer writing your own cookie policy, you're welcome to describe it exactly that way: a functional storage item used to keep a chat conversation together.
7. Managing Cookies
Use the buttons in section 5 to allow or refuse advertising cookies at any time. Most browsers also let you block or delete cookies and clear local storage from their settings; blocking the essential ones will log you out and stop the dashboard working.
8. Changes to This Policy
We may update this policy occasionally. We'll update the “Last updated” date above when we do, and if the change involves a new kind of cookie, we'll show the notice again.
9. Contact Us
Questions about this policy? Reach out via our contact page.