Legal
Cookies
What CasaReply stores in your browser, and why.
Not final. This page describes how CasaReply works today, accurately, but it has not yet been reviewed by a lawyer and is not a finished legal agreement. It will be replaced before CasaReply begins charging. If something here matters to your decision, ask us and we will answer plainly.
This website
The public CasaReply website sets no cookies. There is no analytics script, no advertising pixel and no third-party tag on these pages, which is why you are not being asked to accept anything.
Fonts are served from our own domain rather than from Google, so loading this page does not tell anyone else that you visited it.
The application
Once you sign in, CasaReply sets cookies because it has to. All of them are strictly necessary, and there is no analytics or advertising cookie to turn off.
- A session cookie, so you stay signed in. Set by Supabase Auth, and required for the application to work at all.
- A cookie recording which of your businesses you are currently working in, if you belong to more than one. It is a preference only: the server re-checks your membership on every request, so changing it cannot give you access to anything.
- A short-lived cookie holding an invitation token, set when you open an invitation link and deleted once you accept. It exists so the token stays out of the page URL, and therefore out of browser history and server logs.
If analytics is added later
There is a deliberate integration point for analytics that is not connected to any provider. If one is added, this page will be updated first and consent will be asked for before anything non-essential is set.