Cookie Policy

Cookies we set

• Session cookies (names starting with "sb-") — set by our authentication provider (Supabase) to keep you signed in securely. Essential; deleted when you sign out or they expire.

• "leadly-auth-next" — a short-lived (10 minute) cookie that remembers which page to return you to after signing in with Google or Apple. Essential; contains a path, no personal data.

Short-lived authentication cookies also protect the OAuth exchange and handle a failed sign-in retry. These cookies support sign-in and account security; they are not used for advertising.

Local storage (on your device)

Your browser stores preferences and small caches: theme (light/dark), language and region, your analytics choice, your saved search location (ZIP/city), onboarding status, blog feedback and cached search results. A random analytics visitor ID and referral/campaign information are stored only after you enable analytics. Optional article feedback uses a separate identifier for each article to prevent duplicate votes. Search areas are sent when needed to find nearby results. Other account-backed preferences or records may also synchronize when you use their features.

You can clear all of this anytime via your browser's site-data controls; you'll be signed out and preferences reset.

Analytics without cookies

Optional analytics are off until you enable them in Settings on this browser or app installation. Our first-party pageview analytics use the random visitor ID from local storage and record the page path, coarse device type, country, and referring site. Signed-in pageviews also include your account's user ID and update your last-active time. These records are linked to your account; the random visitor ID is pseudonymous, not guaranteed anonymous. No IP address is stored with pageview analytics. Turn analytics off in Settings → Notifications → "Help improve Leadly with basic usage analytics." This stops future optional collection and clears local analytics identifiers and referral information, without deleting historical server records or functional article feedback.

Third-party services

A few embedded services set their own strictly-functional state when you use the features that load them: Cloudflare Turnstile (the sign-up bot check) and Google Maps (the map view in Find Clients). Stripe would apply at checkout only if paid plans are enabled. None of these are used by Leadly for advertising.

Questions: [email protected]. See also the Privacy Policy.