Cookie Policy
Last updated: August 5, 2026
1. What we use, and why there is no cookie banner
adasafe uses a small number of cookies, and every one of them is strictly necessary — it keeps you signed in, protects the checkout, or blocks bots. We use no advertising cookies, no cross-site tracking, and no third-party marketing pixels.
Our only analytics is Cloudflare Web Analytics, which measures page views in aggregate. It sets no cookie and stores nothing in your browser.
That is why you are not asked to accept or reject cookies here: there is nothing non-essential to switch off. A consent banner would gate nothing. If that ever changes — if we add anything that is not strictly necessary — we will ask for your consent first and update this page.
2. The full list
| Name | Provider | Purpose | Type | Duration | Category |
|---|---|---|---|---|---|
| cf_clearance | Cloudflare | Records that your browser passed a security challenge, so you are not challenged again. | Cookie | 1 year | Strictly necessary |
| __cf_bm | Cloudflare (via Paddle) | Bot management. Set when the Paddle checkout script loads on the pricing page. | Cookie | 30 minutes | Strictly necessary |
| csrf_token | Paddle | Protects the checkout against cross-site request forgery. | Cookie | Session | Strictly necessary |
| cf_chl_* (Turnstile) | Cloudflare | Bot and fraud protection on the sign-in, sign-up, and contact forms. | Cookie | Short-lived | Strictly necessary |
| sb-<project>-auth-token | Supabase | Keeps you signed in to your account between visits. | Local storage | Until you sign out or clear it | Strictly necessary |
| Cloudflare Web Analytics beacon | Cloudflare | Counts page views in aggregate. Sets no cookie and stores nothing in your browser. | No storage (network request only) | — | Analytics (cookieless) |
These durations are set by the providers, not by adasafe, and can change. Some are only set under specific conditions: Paddle’s cookies once you open the checkout on the pricing page, and cf_clearance only if Cloudflare challenges your browser.
3. Managing cookies
You can clear or block cookies at any time from your browser settings — usually under Privacy, Cookies, or Site data. Most browsers also let you clear the data for a single site, and offer a private-browsing mode that discards everything when you close the window.
Because every cookie listed above is strictly necessary, blocking it will break parts of the site: you will be signed out and unable to stay signed in, sign-in and contact forms may reject you as a bot, and the checkout may refuse to complete. Nothing you block here stops us from tracking you — we were not tracking you.
Clearing your browser data does not delete your adasafe account or the scans in it. To delete those, use account settings, or see the Privacy Policy for your data rights.
4. Questions
Email privacy@adasafe.ai and we will answer.