Cookie & Tracking Policy
Mandra Voice
Version 1.0 · Effective 18 September 2026
This policy explains what we store on your device and in your browser. It supplements the Privacy Policy.
The short version: we use only what is strictly necessary to keep you signed in, and no advertising or tracking cookies at all. That is why you do not see a cookie banner — under the EU ePrivacy Directive and equivalent laws, strictly necessary cookies do not require consent, and we do not set any other kind.
1. Our website and admin portal
| What | Purpose | Type | Lifetime |
|---|---|---|---|
| Supabase authentication session | Keeps you signed in and identifies your account on each request | Strictly necessary | Until you sign out, or the session expires |
| Session refresh token | Renews your session without making you sign in repeatedly | Strictly necessary | Until you sign out |
| Theme and interface preferences | Remembers light/dark mode and interface state | Strictly necessary (functional) | Until you clear browser storage |
That is the complete list.
We do not use: advertising cookies · retargeting or conversion pixels · Google Analytics or any third-party analytics script · social media tracking widgets · session replay · cross-site tracking of any kind · fingerprinting.
We do not sell or share the information in these cookies, and we do not permit anyone else to set cookies through our site.
2. The desktop application
The desktop application is not a web browser and sets no cookies for browsing. It does store data locally on your computer so it works offline and starts quickly:
| What | Why | Where |
|---|---|---|
| Your settings — hotkey, language, activation mode, and the rest | So the app works the way you configured it, immediately, without waiting for the network | Application support directory |
| Your own provider API keys, if you supplied any | So you do not have to re-enter them | Encrypted with macOS Keychain / Windows DPAPI |
| A cached copy of your profile, snippets, history, activity, notifications, and usage | So panels open instantly and the app works when you are offline | Local application storage, namespaced per account |
| An offline queue of dictations | So a dictation made without a connection is not lost, and syncs when you reconnect | Local application storage |
| Draft recovery data | So an interrupted dictation can be recovered | Local application storage |
| Your session token | So you stay signed in between launches | Local application storage |
| A device identifier we generate | To enforce the device limits on your plan and let you manage sessions | Local application storage |
This local data is on your computer, not ours. Signing out clears the cached account data. Uninstalling the application removes it; deleting your account removes the server-side copy.
3. Stripe
When you go to checkout or open the billing portal, you are on Stripe's pages and Stripe sets its own cookies — including ones used for fraud prevention, which are strictly necessary for taking a payment safely. This is governed by Stripe's Privacy Policy and Stripe's Cookie Policy.
4. Error reporting
Our error reporting (Sentry) is not a cookie and is not used for advertising. It records crashes and errors so that we can fix them, as described in §1.3 of the Privacy Policy.
If your browser sends a Global Privacy Control signal, we automatically turn off performance tracing and keep only crash capture, and we switch your usage-analytics preference off. See §8 of the Privacy Policy.
5. Your controls
- Global Privacy Control — enable it in your browser or with an extension; we honour it automatically. globalprivacycontrol.org
- Usage analytics — Settings → Data & Privacy → Usage analytics, off at any time.
- Browser settings — you can block or delete cookies in your browser. Blocking the authentication cookies will sign you out and prevent you from signing back in, because they are how the site knows who you are.
- Local app data — sign out of the application to clear cached account data, or uninstall it to remove everything local.
6. Changes
If we ever introduce a cookie that is not strictly necessary, we will implement a proper consent banner first, and will not set it until you agree. We will update this policy and announce the change as described in the Privacy Policy.