Cookie Policy
Five cookies. All of them do work you asked for.
TRACE NDT sets no advertising cookies, no analytics cookies and no third-party trackers — so there's no consent dialog to wade through. Here is the complete list, what each one does, and how long it lasts.
Effective August 21, 2026
Every cookie TRACE sets
sb-…-auth-token
Until you sign out, or the session expires
Keeps you signed in as you move between pages. Set when you sign in, cleared when you sign out. Large sessions get split across numbered cookies (…-auth-token.0, …-auth-token.1) — same single purpose.
sb-…-auth-token-code-verifier
Minutes
A one-time value used only while a sign-in is in flight — for example completing a Google sign-in or a password-reset link. Discarded as soon as the sign-in finishes.
technician_record
One year
For the handful of technicians who hold records with more than one firm, remembers which record you were last looking at so the app opens where you left off. A display preference — it grants no access of its own, and the record it names is checked against what you actually hold every time.
sidebar_collapsed
One year
Remembers whether you collapsed the navigation sidebar, so the app loads the way you left it instead of flashing to the wrong width. A display preference — nothing more.
trace_exam_session
8 hours
Only for someone taking a test from a share link without an account. It ties the browser to that one attempt so answers save as the candidate moves between questions — there is no login to do that job. It is scoped to the test-taking pages alone, unreadable by scripts, and identifies the attempt rather than the person.
The sb-… cookies come from Supabase, the database and authentication service TRACE runs on. They hold your session for this site only — they are first-party, not shared with anyone, and carry no advertising or profiling data.
Why there's no accept-or-reject choice
Cookie banners exist because most sites set cookies that serve someone other than you — ad networks, analytics vendors, data brokers. TRACE sets none of those, so there is no optional category to switch off and nothing meaningful to consent to.
Every cookie in the table above is strictly necessary or a display preference you set yourself. Rejecting the session cookie would simply mean you cannot sign in. That's why the notice at the bottom of the screen has one button — it tells you what's happening rather than asking you to negotiate with a preferences dialog.
Browsing without signing in
The public pages — home, pricing, features, the module pages, this policy — set no cookies at all. Reading about TRACE writes nothing to your browser.
There is one exception, and it is not really browsing: if someone sends you a link to take a test, starting that test sets trace_exam_session. A candidate with no account still needs something holding their place between question one and question forty, and that cookie is it. It is written when you begin the attempt, never before — opening the link and reading the instructions sets nothing.
Local storage
TRACE stores one value in your browser's local storage: a flag recording that you dismissed the cookie notice, so it doesn't reappear on every page. It contains no identifier and is never sent to our servers.
Third parties
TRACE loads no advertising scripts, analytics scripts, tracking pixels, social widgets, or fingerprinting tools. There are no third-party cookies on any TRACE page.
Two exceptions sit outside our pages, on the provider's own domain and under the provider's own policy. The signup page and a firm's public lead form embed Cloudflare Turnstile — a bot check that runs in a frame served by Cloudflare, which may store a short-lived value there to remember the check passed; Cloudflare designed Turnstile specifically to work without tracking cookies or visitor profiling. And subscription payments happen on Stripe's hosted checkout pages, which set Stripe's cookies under Stripe's cookie policy.
Controlling cookies
Every browser lets you view, delete, and block cookies for a site, usually under privacy or site-data settings. Clearing TRACE's cookies signs you out and forgets your sidebar preference; blocking them entirely means sign-in won't work, because the browser has nowhere to keep the session.
Clearing local storage brings the cookie notice back — that's the only effect.
Changes to this policy
If the cookies TRACE sets ever change, this page and the date at the top change with them, and the notice reappears so you're told rather than left to notice on your own.
The rest of the picture
Cookies are a small slice of it. The Privacy Policy covers what TRACE collects, who touches your data, and how long it's kept — and the contact form reaches a person if something here isn't clear.