FlatGrad Legal

FlatGrad Cookie Policy

Clear, practical policies designed to protect our student community and keep the marketplace trustworthy.

Version:: 3.0
Last updated:: September 17, 2026
Effective:: September 17, 2026

A note on trust and security. FlatGrad reviews these policies as the platform evolves. If you spot a concern, report it to team@flatgrad.com.

1. Introduction

This Cookie Policy ("Policy") explains how FlatGrad ("we," "us," or "our") uses cookies and related browser storage on the FlatGrad website. It describes the website technologies currently implemented by FlatGrad and the external services used to provide authentication, security, analytics, and report processing.

This Policy describes the website only. It does not make claims about mobile applications, mobile-app SDKs, or mobile-app storage behavior.

Necessary authentication and security technologies are used to provide requested website functionality. You can manage or clear cookies and browser storage through your browser settings.

2. Cookies and Browser Storage

Cookies are small files stored by a browser. The website also uses browser localStorage, which is separate from cookies. FlatGrad does not currently use advertising pixels, tracking beacons, device fingerprinting, or advertising trackers on the website.

3. Technologies Used on the Website

Supabase authentication and session storage

Supabase authentication and the Supabase SSR client use necessary browser/session storage for sign-in, session persistence, account security, and protected marketplace features such as listings, messaging, favorites, settings, and report submissions.

`flatgrad-theme` localStorage

The website stores the light/dark theme preference in first-party browser localStorage under the key flatgrad-theme. This is preference storage, not a cookie and not analytics tracking.

Vercel Analytics

The website renders Vercel Analytics for website measurement. Vercel may process information according to its applicable documentation and policies. FlatGrad does not use a separate advertising or marketing analytics provider on the website.

Cloudflare Turnstile

Sign-in and sign-up use Cloudflare Turnstile for human verification and abuse prevention. Cloudflare may process technical and security information necessary to provide the challenge.

Formspree

Support requests and voluntary launch-notification signups may be sent to Formspree for external form processing. Marketplace issue reports are stored in FlatGrad's Supabase-backed reporting system rather than being sent to Formspree by the website. FlatGrad does not represent that Formspree sets cookies on the FlatGrad website; Formspree's handling of information is governed by its applicable policies.

4. Managing Your Cookies

You can control cookies through your browser settings. You can:

Block all cookies
Block third-party cookies only
Delete existing cookies
Be warned before cookies are placed

Important: Disabling essential cookies may prevent you from logging in or using FlatGrad properly.

Browser Settings: Look for cookie settings in your browser preferences. All modern browsers (Chrome, Safari, Firefox, Edge) allow you to manage cookies.

5. Managing Cookies and Browser Storage

FlatGrad does not currently provide a cookie banner, consent manager, preference center, or account-level cookie settings. You can manage or clear cookies and browser storage through your browser settings. Disabling necessary authentication or security storage may prevent sign-in or protected marketplace features from working correctly.

6. Information and Retention

The technologies described above may process information such as login status, session information, browser or device details, network information, security signals, pages or features used, support-request data, and launch-notification signup data, depending on the service and the requested functionality. FlatGrad does not use these technologies to sell personal information to advertisers.

Authentication and session storage duration depends on FlatGrad's authentication configuration and applicable session behavior. The flatgrad-theme preference remains until it is cleared or overwritten. External services may retain information according to their applicable practices and policies.

7. Third-Party Services

Supabase, Vercel, Cloudflare, and Formspree provide services described in this Policy. Their handling of information is governed by their own applicable policies and documentation, which FlatGrad does not control. No claim is made here that a service places a cookie on the FlatGrad website unless specifically stated above.

8. International Data Transfers

Some cookies may involve data transfers outside your country (e.g., to the United States). We rely on appropriate safeguards including Standard Contractual Clauses (SCCs) where required.

9. Children's Privacy

We do not knowingly use cookies to track or profile children under 13 (or under 16 in certain jurisdictions). If identified, we delete such cookies immediately.

10. Updates to This Policy

FlatGrad may update this Cookie Policy anytime. Updates will be posted with a new effective date. Continued use of FlatGrad means you accept updates.

11. Questions?