This policy explains the small pieces of data used by RePace to keep account sign-in and your session secure. It reflects the cookies currently set by the RePace application.
Effective date
23 July 2026
Last updated
23 July 2026
1. What cookies are
Cookies are small text files placed in your browser. They can help a website remember a session, keep it secure or remember a choice. RePace currently uses only cookies needed for authentication and security in the application.
2. Strictly necessary authentication and security cookies
These first-party cookies are needed to complete account sign-in and to keep you signed in. They are not used for advertising or cross-site behavioural profiling.
repace_session — records a signed-in RePace session after successful authentication. It lasts for up to 30 days.
repace_google_pending — temporarily protects and completes the Google sign-in flow, including the return page after sign-in. It lasts for up to 10 minutes.
Both cookies are limited to RePace, use a secure connection when the site is served over HTTPS, are not available to page JavaScript, and use a same-site setting intended to reduce cross-site request risks.
3. Preference, analytics and marketing cookies
RePace does not set preference cookies or marketing cookies, and does not include Google Analytics, advertising tags or behavioural tracking tools. RePace uses Cloudflare Web Analytics for aggregate, privacy-first traffic measurement.
Because the app currently uses only strictly necessary RePace cookies, it does not present a non-essential-cookie acceptance or rejection banner. If RePace later adds non-essential cookies, it should add appropriate consent controls and update this policy before those cookies are used.
4. Third-party services
Google is used only to authenticate users who choose Google sign-in. During that process, your browser communicates with Google’s authentication services, which are governed by Google’s own privacy and cookie practices. Cloudflare hosts the RePace application and provides aggregate web analytics. Resend delivers transactional email, including sign-in codes and optional marketplace notifications. This policy describes cookies set by the RePace application, not any cookies a browser or third-party provider may set on its own domain.
5. Managing or withdrawing cookie consent
You can remove or block cookies using your browser settings. You can also sign out of RePace to end the current session. As there are no optional RePace cookies at present, there is no separate cookie-preference setting to withdraw.
If you block or delete strictly necessary cookies, account sign-in may not complete and RePace may not be able to keep you signed in or securely return you to the action you started.
6. Changes and contact
We will update this policy if our cookie use changes. For a question about cookies or privacy, contact [DPO email address].
