Legal
Cookie Policy
Last updated 11 September 2026
Every cookie Groply sets, what each one is for, and how long it lasts. There are three, they are all doing a job you asked for, and none of them is watching you. That is also why there is no consent banner.
1.The short version
- Groply sets a cookie to keep you signed in, and one random id so that work you do before signing in is still yours afterwards.
- There is no analytics cookie, no advertising cookie, no tracking pixel and no third party tag, on this site or in the app.
- Nothing about you is sold, shared for advertising, or used to build a profile.
- Because nothing here is optional to the service, there is no cookie banner to dismiss. Clause 4 explains that properly.
2.The cookies, in full
| Name | What it is for | How long | Essential? |
|---|---|---|---|
| sb-… (several) | Keeps you signed in. Set by Supabase, which is what holds Groply accounts. The names begin with sb- and the rest depends on the project. | Until you sign out, or the session expires | Yes |
| __Host-groply_visitor | A random id, and nothing else. It keeps the work you do signed out attached to you instead of pooled with every other visitor, and it is what the free daily allowance is counted against. | Up to 400 days | Yes |
| groply_visitor | The same id under its older name. Only a connection without HTTPS uses it, because the __Host- prefix above requires a secure one. Still read on the way in, so nobody loses their work in the changeover. | Up to 400 days | Yes |
The signed-out id is worth one more sentence, because it is the only one that lasts a long time. It holds a random value and nothing else: no name, no email address, no device fingerprint, nothing derived from you. It is simply the label your signed-out work is filed under, and the counter your free daily allowance is kept on.
3.Things kept in your browser that are not cookies
Two preferences are stored by the app in your browser's own local storage rather than in a cookie. They never leave your device and they are never sent to us, but a cookie policy that left them out would be hiding something, so they are here.
| Name | What it is for | How long | Essential? |
|---|---|---|---|
| groply.theme | Which theme you picked, so the app opens in it instead of flashing the wrong one first. | Until you clear your browser storage | A preference you set |
| groply.rail | Whether you folded the side rail away. | Until you clear your browser storage | A preference you set |
4.Why there is no consent banner
Consent is required before storing anything that is not strictly necessary for a service you have asked for. That is the rule in the EU and the UK (the ePrivacy Directive, and the Privacy and Electronic Communications Regulations), and the categories it exists for are analytics, advertising and profiling. Cache00 sets none of those, so there is nothing here for consent to be asked about.
Signing in requires a session cookie, and using Groply without an account requires something to hold your work under. Both are the service you requested rather than something done to you on the side. A banner asking permission for them would be a banner that cannot be declined, which is worse than no banner at all: it teaches people to click through the ones that matter.
The part of this a regulator would push on, said out loud: 400 days is a long life for an identifier, and the argument that it is strictly necessary rests on signed-out work still being there when you come back. If that argument were rejected, the answer would be a shorter life rather than a banner. You can end it yourself at any time, which is clause 5.
And the commitment that makes this worth reading: the day Groply adds analytics, advertising, or any third party that watches you, it gets a real consent banner at the same time, with a genuine way to refuse, and this page is rewritten before either ships. If you ever find a tracker here without one, that is a bug and we would like the email.
5.How to get rid of them
Every browser can clear cookies and site data, usually under Privacy or Site settings, and you can clear Groply's without touching any other site's. You can also block cookies for this site entirely.
Two honest consequences. Blocking the session cookie means you cannot stay signed in, so the app will not work in any useful way. Clearing the signed-out id while you are not signed in means starting with a fresh, empty workspace, and anything made under the old id stops being reachable: it was filed under a label your browser no longer has. Work made while signed in belongs to your account instead and is not affected.
The surest way to keep your work is to sign in. When you do, whatever you made signed out is moved onto your account and the old id is retired.
6.Where this sits
This page is the detail behind the cookies section of our Privacy Policy, which covers everything else: what is collected, who processes it, how long it is kept, and what you can ask us to delete. If the two ever disagree about a cookie, rely on the Privacy Policy and treat the disagreement as a mistake we want reported.
Questions, or a tracker you think should not be here, to contact@cache00.com.