Essential cookies
Butterspace uses Supabase cookies named sb-<project>-auth-token, sometimes split into numbered chunks, to keep you signed in and refresh your session. Short-lived provider/OAuth cookies or code-verifier cookies may also be used during sign-in. They are necessary for the login you request, not for advertising.
The Supabase browser-cookie configuration can set a maximum lifetime of up to 400 days, subject to browser limits. Access tokens expire sooner and sessions can end through sign-out, revocation or account deletion. OAuth state and verifier data are used for the sign-in flow and cleared or replaced as that flow ends.
The butterspace_demo_ai cookie helps prevent abuse of optional demo AI Import. It lasts up to 24 hours, is restricted to the demo API path, and is not used for cross-site advertising.
Storage on your device
The browser demo saves its workspace, photos and orders in IndexedDB. Appearance, table layout, view choices and purchase drafts can use browser-local storage. Theme preferences include the butterspace-theme key. These items remain until cleared, replaced or removed by the relevant app function; they are not advertising identifiers.
Clearing cookies can sign you out. Clearing site storage can erase browser-demo work, local preferences and unsent drafts. Browser controls let you inspect, block or remove this storage, but blocking necessary storage can prevent parts of the app from working.
Optional analytics and advertising
Optional measurement stays off until you choose the relevant purpose. Usage analytics enables predefined, content-free events in PostHog EU and selected Google Analytics 4 milestones. Advertising measurement also requires Usage analytics. When both are allowed, Google Analytics can associate eligible visits, account creation, meaningful demo use and first paid subscriptions with Google Ads. Advertising click identifiers such as gclid, wbraid and gbraid may be sent to Google only with that advertising choice. We do not enable remarketing, Google signals, enhanced conversions, personalized advertising or session replay.
The bs_privacy_v1 cookie remembers your choice for 180 days. With Usage analytics, bs_analytics_v1 provides a random PostHog browser identifier for up to 180 days, bs_attribution_v1 remembers approved source and campaign categories for 30 days, and Google's _ga and _ga_WQK713WJSJ cookies have a configured maximum of 180 days without rolling renewal. Google advertising cookies named _gcl_au, _gcl_aw or _gcl_dc, if used, require Advertising measurement. Browser or provider limits can shorten these periods. The HttpOnly bs_measurement_v1 cookie references our server-owned choice record for up to 180 days; it contains no account, payment or workspace content.
The cookie banner offers Reject all, Accept all and a Manage preferences link for separate purpose choices. Open the Cookies page from the website or legal-page footer, Account settings in the app, or Workspace settings in the demo. Select Manage cookie preferences on that page, then choose Reject all to withdraw optional consent. Withdrawal stops new browser events, clears the reviewed optional browser identifiers and requests cancellation of queued server conversions. A request already received by a provider cannot be recalled. Server withdrawal takes effect when our server receives the changed choice; if the connection fails, the browser tries again when you return to the page. Workspace content, sign-in and browser-demo storage remain available independently.
Domains and contact
The website at butter.space and app at app.butter.space share the reviewed optional preference and measurement cookies on the butter.space domain. This lets the website and app respect the same choice and, when permitted, recognize the same browser. Legacy vercel.app addresses and local previews do not share that domain cookie. Authentication cookies and your saved demo remain separate from optional measurement.
Concept 27 SIA, registration number 40203495052, Nicgales iela 38-63, Riga, Latvia, LV-1035. Questions: help@butter.space. See the Privacy policy for personal data handling.