Cookie Policy

I. YOUR CHOICE

We use analytics to understand how the site is used, and they are on by default. Turn on Do Not Track in your browser and we send nothing to PostHog.

We use no advertising or marketing cookies.

II. WHAT WE STORE

Essential

Always on. They sign you in, keep your account secure and remember the cookie notice.

sb-<project>-auth-token

Kind: Cookie

Purpose: Keeps you signed in (Supabase Auth). A large session is split into .0 and .1 parts.

Duration: 400 days

sb-<project>-auth-token-code-verifier

Kind: Cookie

Purpose: Completes a sign-in that returns from Google, GitHub or an email link.

Duration: Until sign-in completes, at most 400 days

runinfra_active_workspace_id

Kind: Cookie

Purpose: Remembers your active workspace.

Duration: 1 year

runinfra_cli_device_consent

Kind: Cookie

Purpose: Protects the approval step when you sign in to the CLI.

Duration: 15 minutes

hf_oauth_state

Kind: Cookie

Purpose: Protects the step that connects your Hugging Face account.

Duration: 10 minutes

runinfra-cookie-consent

Kind: Local storage

Purpose: Remembers that you closed the cookie notice.

Duration: Until you clear it

Preferences

Always on. They keep your settings and help us fix failed sign-ins. Not used for analytics.

runinfra-theme

Kind: Local storage

Purpose: Your light or dark theme.

Duration: Until you clear it

runinfra-layout-mode

Kind: Cookie

Purpose: Your dashboard navigation layout.

Duration: 1 year

runinfra_signin_probe

Kind: Cookie

Purpose: Helps us diagnose a failed sign-in. Deleted when sign-in succeeds.

Duration: 2 hours

runinfra_usage_layout

Kind: Cookie

Purpose: Your usage page layout and chart order.

Duration: 1 year

runinfra.codingPlan.nextStep.<workspace>

Kind: Cookie

Purpose: Suggestions you dismissed on the coding plan usage page, so they stay hidden when it loads.

Duration: 1 year

Interface state

Kind: Local and session storage

Purpose: Your last sign-in method, panel sizes, dismissed notices and unsent drafts.

Duration: Until you clear it or close the tab

Analytics

On by default. Do Not Track turns PostHog off.

ph_<project>_posthog

Kind: Cookie

Purpose: PostHog product analytics: a random ID for your browser and visit, linked to your account once you sign in.

Duration: 1 year from your last visit

ph_<project>_posthog

Kind: Local storage

Purpose: A copy of the same ID.

Duration: Until you clear it

ph_<project>_*

Kind: Session storage

Purpose: PostHog: the current tab and visit.

Duration: Until the tab closes

Clearing this site's data in your browser removes all of the above and signs you out.

III. THIRD PARTIES

• PostHog: Product analytics, stored in the US. Reached through runinfra.ai. Privacy policy of PostHog
• Vercel: Hosting. Web Analytics and Speed Insights count page views and page speed, and set no cookies. Privacy policy of Vercel
• Sentry: Essential error monitoring on every page, so we can find and fix failures. Sets no cookies. Privacy policy of Sentry
• Supabase: Sign-in. Its cookie is set on runinfra.ai and listed above. Privacy policy of Supabase
• Cloudflare Turnstile: Checks that a person, not a bot, is signing in, signing up, resetting a password or deleting an account. Privacy policy of Cloudflare Turnstile
• Stripe: Payments, on Stripe's own checkout page. runinfra.ai loads no Stripe script. Privacy policy of Stripe

IV. DO NOT TRACK

We send nothing to PostHog from a browser that sends Do Not Track.

It covers your browser only. Events our servers record about your account, such as purchases and API usage, are covered by our Privacy Policy.

V. CHANGES TO THIS COOKIE POLICY

When what we store changes, we update this page and the date at the top.

VI. CONTACT US

Questions about cookies or this policy: osama@rightnowai.co.

Last Updated: September 29, 2026