1. What is a cookie?
A cookie is a small text file stored on your device (computer, tablet, smartphone) when you visit a website. Cookies allow the site to remember your actions and preferences (such as login, language, font size, and other display settings) for a given period of time.
Cookies cannot harm your device and do not contain viruses.
2. Cookies used by Lost & Found
We use several categories of cookies and first-party identifiers: some are strictly necessary to run the service, while others remember your preferences, measure journeys, or feed advertising platforms when you authorize it.
Essential cookies (required)
These cookies are required for the website to function. Without them, you would not be able to use our services. They do not require your consent.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| sb-*-auth-token | Supabase | Keep you signed in | Session |
| sb-*-auth-token-code-verifier | Supabase | Secure authentication (PKCE) | Session |
Preferences and consent proof
These cookies remember your interface choices and your consent decision. They do not trigger advertising tags by themselves.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| locale | Lost & Found | Remember your language preference | 1 year |
| theme | Lost & Found | Remember your theme preference (light/dark) | 1 year |
| lf_consent | Lost & Found | Remember your cookie/measurement/advertising choice and the consent banner version | 6 months |
First-party measurement and attribution
These first-party identifiers help link a journey to a session, deduplicate events, preserve acquisition parameters, and prepare marketing or affiliate attribution. In the EEA/UK/CH, they are not persisted before your explicit choice for non-essential purposes.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| lf_aid | Lost & Found | Create a first-party anonymous identifier to measure a journey over time and deduplicate events | Up to 13 months |
| lf_sid | Lost & Found | Create a first-party session identifier to relate events from the same visit | 30 minutes after the last activity |
| lf_attr | Lost & Found | Temporarily store UTMs, ad click IDs, email parameters, and referral / affiliate references | 90 days |
Activation: These first-party identifiers remain under our control. They can then feed our internal analytics, our first-party measurement/attribution layer, and, only if certain integrations are enabled, compatible advertising platforms — always according to your consent level and the applicable local regulation.
3. Third-party cookies
Depending on your region, your consent level, and the integrations actually enabled, selected partners may place their own cookies or receive events through our first-party measurement and attribution layer.
| Service | Provider | Purpose | More info |
|---|---|---|---|
| Stripe | Stripe, Inc. | Secure payments, fraud prevention | Stripe Privacy Policy |
| Google Tag Manager / Google Ads / GA4 | Google LLC | Manage tags, measure journeys, prepare enhanced conversions, and run Google Ads / GA4 if configured | Google Privacy Policy |
| Meta Ads (Facebook / Instagram) | Meta Platforms Ireland Ltd. | Receive web/server-side events to optimize Facebook / Instagram campaigns when Meta Ads is enabled | Meta Privacy Policy |
Note: The advertising partners listed above do not automatically receive data at all times. In the EEA/UK/CH, their tags are enabled only after explicit consent. Outside those regions, activation still depends on our configuration and any choices made available to you.
4. Activation levels and consent
Our tracking stack operates by level, depending on your region and your choices:
- Essential only: authentication, security, payment, consent banner, and strictly necessary service components.
- Preferences: remembering theme, language, and your consent choices.
- Measurement: first-party identifiers, internal analytics, email attribution, and funnel events to understand journeys and improve the product.
- Advertising: web/server-side event delivery to Google, Meta, and TikTok when those platforms are enabled for campaign optimization.
5. How to manage cookies
From our preferences panel
You can accept, refuse, or customize the Measurement / Advertising / Preferences categories from the banner shown on your first visit, then reopen that panel at any time.
Where local law requires it, our measurement and advertising tags remain blocked until you make an explicit choice.
Through your browser
You can configure your browser to accept or reject cookies. Here's how to access the settings for the main browsers:
Warning: If you block essential cookies, you won't be able to sign in to your Lost & Found account.
6. Local storage (localStorage)
In addition to cookies, we use your browser's local storage (localStorage) to store certain interface preferences and temporary product states. This data generally stays on your device unless an explicit user action sends it to our servers.
- Display preferences
- Tooltip status (seen/unseen)
- Temporary onboarding or interface state
- Temporary chatbot history, conversation identifier, and widget open / closed state
You can clear this data using your browser's developer tools (usually F12 → Application → Local Storage).
7. Changes
We may update this Cookie Policy at any time. Any changes will be published on this page with a new last updated date.
8. Contact
If you have any questions about our use of cookies, contact us at: support@lostnfound-app.com
For more information about how we protect your data, see our Privacy Policy.