COOKIE POLICY

1. What we use

Fruits only sets cookies that are strictly necessary to operate the Service. We do not set advertising, analytics, fingerprinting, or cross-site tracking cookies. We do not embed third-party trackers.

2. Cookies we set

• Session cookies (Supabase Auth):short-lived tokens used to keep you signed in across pages. Set by Supabase's SSR client. Required for authentication. Expire automatically; cleared on logout.
• CSRF / session helpers: auxiliary cookies used by the auth flow for OAuth callback state. Lifetime: a few minutes, cleared after the flow completes.

3. Local storage

We use your browser's localStorage for a single non-sensitive flag that records whether you have dismissed the cookie notice banner. Removing it through your browser's settings will simply show the notice again on next visit.

4. Why no consent banner is required for these cookies

Under Art. 5(3) of the ePrivacy Directive and the EDPB Guidelines on Cookies, consent is not required for cookies that are strictly necessary to provide a service explicitly requested by the user (such as authentication). We still display a short notice for transparency.

5. Managing cookies

You can clear cookies for this Service through your browser at any time. Clearing the auth cookies will sign you out.