1. What cookies are
Cookies are small text files a website stores in your browser. They let a site remember things between requests — for example, that you’re signed in. Some cookies are set by us (first-party); some are set by the services we use to run secure sign-in, checkout, and bot protection (third-party). Related technologies such as local storage work similarly; where we mention cookies, we mean these too.
2. Our essential-only posture
We use strictly-necessary cookies only.Because they’re essential for the service to work, they can’t be switched off — but there are no analytics or advertising cookies to turn off in the first place.
Icarus Works sets only the cookies the site needs to keep you signed in, process a secure payment, and protect against automated abuse. We do notuse advertising, marketing, or analytics/tracking cookies. If we ever introduce a non-essential cookie (for example analytics), we’ll add it to the category structure in our preference center, ask for your consent first where required, and update this page.
3. Cookies we set
| Cookie | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
sb-* (Supabase auth) | Supabase (first-party) | Keeps you securely signed in to your Command Center. Without it you would be logged out on every page. | Session / up to 1 year (refresh token) | Strictly necessary |
iw_consent | Icarus Works (first-party) | Remembers your cookie-notice choice so we do not show the banner again. | 12 months | Strictly necessary |
__cf_bm / cf_clearance | Cloudflare (Turnstile) | Distinguishes humans from bots and protects forms (e.g. the free check and sign-in) from abuse. | Up to 30 minutes / session | Strictly necessary |
__stripe_mid / __stripe_sid | Stripe | Fraud prevention during secure checkout. Set only when you begin a payment. | Session – 1 year | Strictly necessary |
4. How to manage cookies
You can review or clear cookies at any time in your browser settings. Note that blocking the strictly-necessary cookies above will break sign-in and checkout. You can re-open our preference center any time using here or in the site footer.
5. Do Not Track & Global Privacy Control
Because we set no tracking or advertising cookies, there is nothing to track across sites. We nonetheless honor the Global Privacy Control (GPC) and recognized opt-out signals as a binding opt-out of any sale or sharing of personal information — see our Privacy Policy and Your Privacy Choices.
6. More information
For how we handle personal data more broadly, see our Privacy Policy. Questions? Email privacy@icarusworks.ai.