Cookies and local storage
What cookies and local storage are for
When you use korum studio, your browser may store small pieces of information on your device. These are primarily cookies (set by our authentication provider Supabase to keep your session active) and local storage entries (localStorage) set directly by the application to remember your interface preferences.
This page exhaustively lists all information we store on the browser side, its purpose, duration and issuer. It is updated whenever the Service code changes. If you notice any discrepancy, please report it to the address in Section 5.
Cookies and storage we use today
The table below lists all cookies and local storage keys currently used by the Service.
| Name / key | Type | Purpose | Duration | Issuer |
|---|---|---|---|---|
| sb-*-auth-token | Strictly necessary | Keep your session authenticated | Session + refresh ~7 days | Supabase (1st party) |
| quorum.theme | Functional | Remember the UI theme (light/dark/system) | Until cleared by you | korum studio (1st party) |
| quorum.locale | Functional | Remember the interface language | Until cleared by you | korum studio (1st party) |
| quorum.activeWorkspaceId | Functional | Restore the last active workspace | Until cleared by you | korum studio (1st party) |
| kds.sidebar.panels.collapsed | Functional | Keep the sidebar collapsed/expanded state | Until cleared by you | korum studio (1st party) |
| korum.consent.v1 | Consent witness | Remember your choice on the cookies transparency banner | 13 months | korum studio (1st party) |
| Vercel Web Analytics | Analytics (opt-in) | Measure page traffic in an aggregated and anonymous way | Cookieless (hash-based measurement) | Vercel Inc. (3rd party) |
| ph_* (PostHog) | Analytics (opt-in) | Measure product behaviour — navigation events, activation funnels. Sent only after analytics consent. No advertising use. | Session + 1 year (distinct_id) | PostHog, Inc. — EU-hosted (eu.i.posthog.com) |
None of these entries are shared with third parties for profiling, audience measurement or advertising purposes. Supabase session cookies are strictly necessary to operate the Service; other keys are functional and exempt from prior consent under the CNIL guidelines (updated 2025). Technical note: keys prefixed quorum.* are kept as-is for backward compatibility with preferences already stored in existing members' browsers.
Tools we do not use
As of today, korum studio does not use any of the following:
- no intrusive audience analytics tool (Google Analytics, Mixpanel, Matomo, etc.); Vercel Web Analytics and PostHog are used in privacy-friendly mode, behind consent;
- no advertising pixel or retargeting network (Meta Pixel, LinkedIn Insight Tag, Google Ads, etc.);
- no heatmap or session recording tool (Hotjar, FullStory, Microsoft Clarity, etc.);
- no third-party cookie set by an embedded social widget.
Should this change, this page will be updated and the cookie management banner will be adapted to collect your prior consent (granular checkbox per category, rejection as easy as acceptance, permanent Manage cookies link in the footer).
Manage your preferences
You can at any time:
- reopen the cookies transparency banner via the Manage cookies link in the footer of the entire Service;
- delete local storage from your browser settings (chrome://settings → Privacy and security; or equivalent in Firefox, Safari, Edge) — this will clear your preferences (theme, language, workspace);
- sign out to end your Supabase session, which will invalidate the sb-*-auth-token cookies in your browser.
Effect of rejection. Rejecting the analytics category prevents both Vercel Web Analytics and PostHog from loading, without degrading your experience. All other non-essential categories remain unused today: a rejection has no further practical effect.
Updates to this Cookies page
We update this page whenever a code change introduces or removes a cookie or storage entry. The date of the last update appears at the top of this page.
For any questions, contact us at contact@infographart.com or via the Privacy Policy.