Legal
Cookie Policy
Last updated: 24 June 2026
1. Overview
Cookies and similar technologies (such as browser local storage) are small files a website can store on your device. Sraat.com uses them sparingly — only what we need to keep you signed in, remember your preferences, and protect the service against abuse. We do not use cookies for advertising or cross-site tracking. For broader privacy information see our Privacy Policy.
2. Strictly necessary
- Authentication session — keeps you signed in after you log in.
- Supabase auth token — stored in browser local storage; required for the app to talk to our backend on your behalf.
- CSRF / security tokens — protect against cross-site request forgery.
These cannot be turned off without breaking core functionality.
3. Functional preferences
- Language and theme (light / dark) preference.
- UI state such as sidebar open/closed and last-viewed card.
- Drafts of your branding and customisation choices before you save them.
4. Analytics
We do not run third-party analytics, advertising, or cross-site tracking cookies. We keep minimal aggregated, anonymised server logs (e.g. error rates and response times) for reliability and abuse prevention; these do not identify you personally.
5. Third parties that may set cookies
- Cloudflare — security and bot protection on our domain.
- PayPal — only loaded on checkout pages when you choose to pay; PayPal sets its own cookies under its own policy.
- Meta (WhatsApp) — message delivery is server-to-server; no Meta browser cookies are set by SRAAT itself.
6. How to control cookies
- Most browsers let you block or clear cookies and site data from settings; doing so will sign you out and reset preferences.
- To stop WhatsApp delivery, reply STOP to any SRAAT message or follow our data-deletion instructions.
- To delete your account and all stored data, see User Data Deletion.
7. Changes & contact
We may update this policy from time to time. The "Last updated" date above always reflects the current version. Questions? Email faisal.redbee@gmail.com or use our contact page. See also our Privacy Policy and Terms of Service.
