Two cookies, both about signing in

This site runs no analytics, no advertising pixels and no third-party trackers, so there is no banner asking you to accept any. What it does set is below, in full.

The sign-in cookie

sb-rvhuwahloubpyidlzcgk-auth-token, set by Supabase only once you sign in. It keeps you signed in and is removed when you sign out. Without it the account page cannot work, so it is strictly necessary and cannot be switched off here.

Google’s one-tap prompt

To offer “Continue as” with one tap, the page loads Google’s sign-in script from accounts.google.com for visitors who are not signed in. Google then sets g_state, which only remembers whether you closed the prompt so it is not shown again straight away. Google sees that the prompt was offered on this site; it learns who you are only if you choose to continue. Close the prompt and nothing is shared.

Sale and sharing

We do not sell personal information or share it for cross-context advertising, so a Global Privacy Control signal has nothing left to switch off here. It is honoured all the same. The privacy page has the rest, and questions go to support@painted.app.