Profili

Legal

Cookie Policy

Last updated 20 September 2026

This page lists cookies and similar storage used on profili.fyi. It should be read with the Privacy Policy. You can change your choice any time from Cookie settings in the footer, or from the banner.

How we ask

On your first visit we show a banner. Necessary items run so the site can sign you in and remember this choice. Preference storage stays off until you Accept all or enable Preferences. We do not use advertising cookies, and we do not load analytics scripts today. If that changes, we will update this page and ask again.

Necessary

These are required for the service. The banner cannot turn them off.

  • Supabase Auth cookies (names such as sb-*-auth-token). HTTP-only session cookies so you stay logged in. Set when you sign in. Cleared when you sign out.
  • profili-consent (local storage). Stores whether you allowed preference storage. Kept so we do not re-prompt on every page.
  • profili-profile:{userId} (local storage, signed-in only). Agent settings for your workspace on this device.

Preferences (optional)

Used only if you accept all or enable Preferences.

  • profili-theme (local storage). Light or dark. If you refuse, we follow the system setting and do not save a choice.
  • profili-waitlist-email (local storage). Remembers that you joined the waitlist in this browser. The email is not sent to our servers today.

Not cookies, but related

  • Microphone. The browser asks before a live call. That permission is not a Profili cookie.
  • Hashed IP. When a visitor starts a call we store a SHA-256 hash of the IP for rate limits. It is not a cookie.
  • Third-party processors. Google (sign-in and Gemini) and AssemblyAI (voice) may set their own cookies if you use their flows. See their policies.

What we do not set

  • Advertising or retargeting cookies.
  • Social share trackers on the marketing page.
  • Third-party analytics tags.

Embedded agents

If a voice page loads inside an iframe (?embed=1), we do not show the cookie banner on top of the widget. The host site remains responsible for its own cookie notice. The embed still uses necessary session pieces if the visitor starts a call.

Browser controls

You can clear site data in your browser. That signs you out and removes local storage. Email privacy@profili.fyi for questions.