Last updated: October 16, 2026
Cookies are small text files stored on your device by your browser when you visit a website. They let the site remember things like that you are signed in. "Local storage" and "session storage" are related browser technologies that serve similar purposes. This policy covers all of them, and we refer to them together as "cookies."
Clarity Books AI uses only strictly-necessary cookies: the ones that keep you signed in, a few that hold your place in something you have started (a weekly review you have not submitted yet, the in-app tour, a notification you tapped, or the business an accountant is viewing), and, on the invoice payment page, Stripe's fraud-prevention cookies. We do not use advertising cookies, analytics cookies, or a product-analytics SDK. We do not use third-party cross-site tracking. We do not sell or share data derived from cookies with data brokers or advertisers.
| Name | Type | Purpose | Duration | Provider |
|---|---|---|---|---|
| sb-<project>-auth-token | Strictly necessary | Keeps you signed in: holds your signed session token (a Supabase JWT). Split into .0 / .1 chunks when large. Without it, you cannot use the Service. | Refreshed automatically; cleared when you sign out | Supabase (first-party) |
| sb-* | Strictly necessary | Short-lived Supabase auth metadata (PKCE verifier, OAuth state, etc.) used during sign-in flows. | Session, short-lived | Supabase (first-party) |
| peekEntity_* | Strictly necessary | Only when an accountant or our support team views a client's books: remembers which of that client's businesses is on screen. It is never set when you use your own account. | Session | Clarity Books AI (first-party) |
| clarity-review-draft:v2:* | Strictly necessary (local storage) | Holds the answers you have given in a weekly review until you submit it, so you can leave and come back without entering them again. It stays on your device; your answers reach us only when you submit (a receipt you attach or a category you create is saved right away). | Until you submit that review, or clear your browser data | Clarity Books AI (first-party) |
| clarity-tour-step | Strictly necessary (session storage) | Remembers which step of the in-app tour you are on, so a page reload does not restart it. | Until you finish the tour or close the tab or app | Clarity Books AI (first-party) |
| clarity.pendingPushDest | Strictly necessary (session storage) | When you tap one of our notifications in the app, remembers which page to open, so you still land there if you have to sign in first. | Until you next sign in, or close the app | Clarity Books AI (first-party) |
| clarity.plaidLinkResume | Strictly necessary (local storage) | When your bank sends you to its own website to sign in while you add accounts or reconnect, remembers which bank connection and business you were updating (including a short-lived bank connection token), the page to come back to and, for 'Switch it back on', the account, so you come back to the same one. Only while our staff or your accountant view your books on your behalf, it also holds your client id. | Until that bank step finishes or is cancelled, or you next open the Banking page; ignored after 30 minutes. | Clarity Books AI (first-party) |
| __stripe_mid, __stripe_sid | Strictly necessary (fraud prevention) | Set by Stripe, our payment processor, only on the page where an invoice is paid, to help prevent card fraud. | __stripe_mid: 1 year; __stripe_sid: 30 minutes | Stripe (third-party) |
Mobile apps: our iOS and Android apps show this same site inside the app, so they use the cookies and storage listed above, kept inside the app on your device. To keep you signed in between launches, the app also saves your sign-in tokens in its own storage on your device, and the OneSignal SDK stores a push-notification device identifier so we can send you notifications such as your weekly check-in. On iOS, the RevenueCat SDK, which handles in-app subscriptions, also keeps your subscription status on your device.
When you connect a bank, Plaid opens its own secure window, which may use its own cookies under Plaid's privacy policy. We do not control or read them.
Our web app also keeps a copy of its offline page and static files in your browser's cache, so it can open without a connection. This holds no personal information.
If this list changes materially, we will update this page and, where required by law, ask for your consent before new cookies are set.
Strictly necessary
Required for the Service to work as you use it: they sign you in, keep you signed in, hold your place in something you have started, and, on the invoice payment page, help prevent payment fraud. They are stored on your device, are set by Clarity Books AI (except Stripe's two fraud-prevention cookies on the invoice payment page), and are never used for analytics or advertising. Consent is not required by law for strictly-necessary cookies. The cookies listed above are the only ones set on our site.
Analytics
Not used. We do not run a product-analytics SDK and do not set analytics cookies. The only automatic diagnostics we collect are error and crash reports, and a sample of performance traces, from our servers, your browser and our apps (via Sentry), and rate-limit logs (via Upstash), none of which uses cookies.
Advertising / tracking
Not used. Clarity Books AI does not serve ads, does not target ads, does not embed third-party ad pixels, and does not participate in any cross-site advertising network.
Note: disabling strictly-necessary cookies will prevent you from signing in or using the Service.
The Service is intended for users 18 and older. We do not knowingly set cookies or collect data from children.
We will update this page when the cookies we use change. The "Last updated" date at the top reflects the most recent revision.
Questions about cookies? Email brayden@claritybooksai.com. For more on how we handle data generally, see our Privacy Policy.