Cookie Policy
Last updated: 22 May 2026 · Version 1.3
1. What Are Cookies
Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work efficiently and to provide information to the site owners. Some cookies are essential for the site to function; others help us understand how visitors use the site so we can improve it.
This policy explains which cookies JoinFunds uses, why we use them, and how you can control them. It complies with the UK Privacy and Electronic Communications Regulations 2003 (PECR) and the UK General Data Protection Regulation (UK GDPR).
2. Your Choices
When you first visit JoinFunds, we show a cookie consent banner at the bottom of the page with two options:
- Accept All— enables both essential and analytics cookies
- Essential Only— only strictly necessary cookies are used; all analytics tracking is disabled
Your preference is stored in your browser's local storage under the key cookie-consent. You can change your preference at any time with the Cookie settings control in the site footer or by using the button below.
3. Essential Cookies (Strictly Necessary)
These cookies are required for JoinFunds to function. They cannot be disabled. Under UK PECR, strictly necessary cookies do not require consent.
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
sb-*-auth-token | Supabase | Maintains your authenticated session. Contains an encrypted access token and refresh token so you stay signed in securely. | Session / 7 days |
sb-*-auth-token-code-verifier | Supabase | Used during the OAuth authentication flow (PKCE). Validates that the login request originated from JoinFunds. | Session |
4. Error Tracking (Optional — Requires Consent)
JoinFunds uses error-tracking SDKs to detect and fix crashes, JavaScript exceptions, and broken network calls before they reach more users. Per UK PECR Regulation 6, we initialise these SDKs only afteryou select “Accept All” in the cookie banner — the Sentry browser SDK writes an anonymous distinct ID to localStorage which falls outside the strictly-necessary exemption. If you select “Essential Only,” the SDK never loads.
| Tool | Provider | Purpose | Duration |
|---|---|---|---|
| Sentry (web) | Functional Software, Inc. | Captures uncaught JavaScript exceptions, failed network calls, and stack traces from the JoinFunds web app. Configured with sendDefaultPii: false and a beforeSend hook that scrubs emails, tokens, and identifiers from error metadata before transmission. No cookies. | 90 days (Sentry retention) |
| GlitchTip (mobile) | Self-hosted at glitchtip.busuioc.uk | Self-hosted, Sentry-compatible error tracker for the JoinFunds mobile app. Same PII-scrubbing posture as the web SDK. Because we self-host the receiving instance, no third-party sub-processor handles mobile error events. No cookies. | 30 days |
How to opt out
The cookie banner controls this directly: choosing “Essential Only” prevents the Sentry browser SDK from loading and from writing any data to your device. If you previously chose “Accept All” you can withdraw consent at any time by reopening Cookie Settings (footer link) and switching to “Essential Only.” The mobile app uses a separate GlitchTip configuration documented in its own in-app privacy notice.
5. Analytics & Tracking (Optional — Require Consent)
These tracking technologies help us understand how visitors use JoinFunds so we can improve the experience. They are only loaded if you select "Accept All" in the consent banner. Vercel tools use session cookies; Umami is cookie-free.
| Tracker | Provider | Purpose | Duration |
|---|---|---|---|
| Vercel Analytics | Vercel Inc. | Collects anonymous page view data including pages visited, referrer, browser, operating system, and device type. Used to understand which features are most popular and where users drop off. Also tracks custom events (e.g. CTA button clicks). | Session |
| Vercel Speed Insights | Vercel Inc. | Measures real-user performance metrics including page load time, First Contentful Paint (FCP), Largest Contentful Paint (LCP), and Cumulative Layout Shift (CLS). Used to identify and fix performance issues. | Session |
| Umami Analytics | Self-hosted (JoinFunds) | Privacy-first, cookie-free analytics. Collects anonymous page view data including pages visited, referrer, browser, operating system, and device type. Umami does not use cookies or collect any personally identifiable information. All data is stored on our own self-hosted instance and is never shared with third parties. | No cookies (session-based) |
No advertising or marketing cookies
JoinFunds does not use any advertising, remarketing, or social media tracking cookies. We never sell or share your browsing data with third parties for advertising purposes.
6. Local Storage
In addition to cookies, JoinFunds uses browser local storage for application preferences. Local storage data does not expire automatically and is only accessible by JoinFunds on your device.
| Key | Purpose | Category |
|---|---|---|
cookie-consent | Stores your cookie preference ("accepted" or "essential-only") | Essential |
theme | Stores your light/dark theme preference | Essential |
jf_pwa_dismissed | Records when you dismissed the "Install App" prompt so it does not reappear for 7 days | Essential |
7. How to Control Cookies
You have several options for controlling cookies:
- Cookie consent banner: Select "Essential Only" when the banner appears on your first visit to disable all analytics cookies.
- Change your preference: Use the Cookie settings control in the site footer to reopen the consent banner and switch between "Accept All" and "Essential Only".
- Browser settings: Most browsers allow you to block or delete cookies through their settings. Note that blocking essential cookies will prevent you from signing in to JoinFunds.
8. Third-Party Privacy Policies
For more information about how our third-party providers handle data:
- Supabase Privacy Policy
- Vercel Privacy Policy
- Umami Privacy Policy (self-hosted, privacy-first analytics)
- Sentry Privacy Policy (web error tracking)
- GlitchTip is self-hosted by JoinFunds; mobile error events do not leave our infrastructure.
9. Updates to This Policy
We may update this cookie policy from time to time to reflect changes in the cookies we use or for regulatory, operational, or legal reasons. The version number and date at the top of this page indicate when the policy was most recently revised.
10. Contact Us
If you have any questions about our use of cookies, please contact us at privacy@joinfunds.app. You can also read our full Privacy Policy for more information about how we handle your personal data.