Cookies and storage.
Everything Drafted stores on your device, what it’s for, how long it stays.
| Name | Category | Purpose | Duration | Legal basis |
|---|---|---|---|---|
| sb-<project>-auth-token | essential | Supabase auth session — keeps you signed in between pages. | 1 hour (refreshed on each request) | Contract performance (signed-in flows) |
| drafted_consent_v1 | essential | Remembers your cookie-consent choice so we do not ask again. | 13 months | Legitimate interest (DPDP/GDPR consent proof) |
| va_* | essential | Vercel Web Analytics (cookieless, aggregated page-view counts). | No cookie — server-side aggregation only | Legitimate interest (aggregated, no PII) |
| __ph_* | analytics | PostHog product analytics — switches from in-memory to localStorage only after Accept. | 1 year (post-consent only) | Consent |
Managing your preferences.
Per-category preferences land in a future release. Today: essential cookies always, analytics on consent only. Clearing your browser’s site data for Drafted will remove the consent record on this device and the banner will reappear on your next visit.
Policy version: 2026-05-14