Cookie Policy

1. What are cookies?

Cookies are small text files that websites place on your device (computer, tablet, or phone) when you visit. They are widely used to make sites work properly, remember your preferences, or understand how the site is used. This policy describes how Chart Rosetta (Ed & Sy Inc., based in Canada) uses cookies and similar technologies, in line with Canadian privacy law.

2. Cookies we use

Strictly necessary cookies

These cookies are required for the Service to function. Without them, you cannot stay signed in or use account-based features.

• Authentication (Supabase): Our authentication provider sets cookies to keep you logged in and to manage your session securely. These are typically session cookies (they expire when you close the browser) or short-lived persistent cookies.
• Platform / hosting: Our hosting or infrastructure may set cookies necessary for load balancing, security, or routing (e.g., session or request identifiers). These do not track you for advertising.

We do not need your consent for strictly necessary cookies, but you can block them in your browser; doing so may prevent you from using the Service as intended.

Functional or preference cookies

We do not currently use functional or preference cookies (e.g., for theme or language). If we add them in the future, we will update this policy and, where required by Canadian privacy law (including PIPEDA), obtain your consent.

Analytics cookies

We use product analytics to understand how the Service is used—for example, which features are used, how often charts are uploaded and explained, and how users move through the product. This helps us improve the product and is not used for advertising. We use:

• PostHog: PostHog’s privacy policy. When you are logged in, we may associate your user ID, email, and plan with analytics.
• Vercel Analytics: general usage metrics (e.g., page views). Vercel may set cookies or use similar technologies per their documentation.

Where required by Canadian law, we will obtain consent or provide a way to opt out. We do not use advertising cookies.

3. Third-party cookies

When you use parts of the Service that rely on third-party services, those services may set their own cookies:

• Supabase (authentication and database): session and security cookies. See Supabase’s privacy policy.
• Stripe (payments): when you go to Stripe Checkout to subscribe, Stripe may set cookies for fraud prevention and checkout. See Stripe’s privacy policy.
• Lemon Squeezy (payments): when you complete a purchase through Lemon Squeezy, they may set cookies for checkout and fraud prevention. See Lemon Squeezy’s privacy documentation.

We do not control these third-party cookies. Their use is governed by each provider’s policy.

4. Duration

Session cookies are deleted when you close your browser. Persistent cookies remain for a set period (e.g., until they expire or you delete them). Our authentication-related cookies are typically session-based or short-lived (e.g., days to a few weeks) to keep you signed in across visits.

5. How to control or delete cookies

You can control cookies through your browser settings. Most browsers let you block or delete cookies for specific sites or for all sites. Blocking strictly necessary cookies may prevent you from signing in or using the Service. For more general information about cookies and how to manage them, see aboutcookies.org or your browser’s help section.

If we add non-essential cookies in the future (e.g., analytics or preferences), we will obtain your consent where required by Canadian privacy law and provide a way to withdraw consent (e.g., via a cookie banner or settings), and will describe it in this policy.

6. Contact

For questions about this Cookie Policy or our use of cookies, contact us at edmel@ednsy.com or through our contact form.