Cookie Policy
Last updated: September 30, 2026
1. What This Policy Covers
Cookies are small text files a website stores in your browser. Somaia also uses your browser's local storage and session storage, which work in a similar way. This page lists every cookie and storage item Somaia sets, what it is for, how long it lasts and who provides it. We made the list by reading them from the running app on September 30, 2026.
2. Your Choice
When you first visit, a banner offers Reject and Accept for analytics cookies. Nothing for analytics loads until you press Accept: the Google Analytics script is not even requested before then. You can change your mind at any time from Cookie settings at the bottom of every page. If you reject, or withdraw after accepting, we delete the Google Analytics cookies from your browser.
If your browser sends a Global Privacy Control signal, we treat it as Reject and do not show the banner.
We keep a record of each choice (Accept or Reject, the time, and the version of the banner you saw) with a random id stored in your browser, so we can show what you agreed to. The record holds no IP address. If you are signed in, it is linked to your account and deleted with it.
3. Essential Cookies
These keep you signed in and keep a guest session working. They are always on, because the service cannot work without them.
| Name | Purpose | Lifetime | Provider |
|---|---|---|---|
sb-<project>-auth-token | Keeps you signed in. It may be split into parts ending .0, .1 when large. | Until you sign out, at most 400 days | Somaia (Supabase sign-in) |
sb-<project>-auth-token-code-verifier | Completes sign-in from an email link or a password reset. | Removed once the link is used | Somaia (Supabase sign-in) |
somaia_anonymous_session | Links your guest answers to a guest session. It is set only after you agree to the guest data notice. | 30 days, renewed while you use Somaia; removed when you create an account | Somaia |
4. Analytics Cookies (only after Accept)
| Name | Purpose | Lifetime | Provider |
|---|---|---|---|
_ga | Tells visits from the same browser apart, so we can count visitors. | Up to 400 days (Google sets 2 years; browsers cap it at 400 days) | Google Analytics |
_ga_<id> | Keeps the current visit together for the same count. | Up to 400 days | Google Analytics |
What Google Analytics receives is limited. For pages about your wellness (quizzes, results, concerns, Today, chat, recipes) it receives only the type of page, not the address. It never receives quiz answers, results, concerns, chat text or check-in answers. Advertising features and Google signals are off.
Vercel Web Analytics and Speed Insights also load only after Accept. They set no cookies and receive the same limited page information.
5. Local Storage and Session Storage
These stay in your browser and are not sent to us automatically. They last until you clear your browser's site data, unless stated otherwise. Somaia does not use session storage at present.
| Name | Purpose | Lifetime | Provider |
|---|---|---|---|
cookie-consent | Your cookie choice (Accept or Reject). | Until you change it or clear site data | Somaia |
cookie-consent-meta | The random id, time and banner version of that choice. | Until you change it or clear site data | Somaia |
somaia-dark-mode | Light or dark display. | Until cleared | Somaia |
somaia-theme-chosen | Whether you picked the display yourself. | Until cleared | Somaia |
glossary_enabled | Whether term explanations are shown. | Until cleared | Somaia |
assessmentStarted | That you have started the quizzes, to take you back to them. | Until cleared | Somaia |
assessmentCompleted | That you have finished the quizzes. | Until cleared | Somaia |
prakritiDraft:guest | Your unfinished Prakriti (constitution) quiz as a guest, so you can pick up where you left off. | Until the quiz is finished | Somaia |
vikritiDraft:guest | Your unfinished Vikriti (current state) quiz as a guest. | Until the quiz is finished | Somaia |
amaDraft:guest | Your unfinished Ama (accumulated toxins) quiz as a guest. | Until the quiz is finished | Somaia |
prakritiDraft:<user> | Your unfinished Prakriti quiz when signed in. | Until the quiz is finished | Somaia |
vikritiDraft:<user> | Your unfinished Vikriti quiz when signed in. | Until the quiz is finished | Somaia |
amaDraft:<user> | Your unfinished Ama quiz when signed in. | Until the quiz is finished | Somaia |
subDoshaDraft:<user>:<dosha> | Your unfinished sub-dosha (finer body-mind type) quiz. | Until the quiz is finished | Somaia |
subDoshaDraft:guest:<dosha> | Your unfinished sub-dosha quiz as a guest. | Until the quiz is finished | Somaia |
quiz_result_prakriti | Your latest Prakriti result, to show the results page. | Until cleared | Somaia |
quiz_result_vikriti | Your latest Vikriti result, to show the results page. | Until cleared | Somaia |
quiz_result_ama | Your latest Ama result, to show the results page. | Until cleared | Somaia |
somaia.chat.theme | Light or dark chat window. | Until cleared | Somaia |
somaia-chat-language | The language you chose for Ask Somaia. | Until cleared | Somaia |
somaia-ask-bubble-position | Where you moved the Ask Somaia button. | Until cleared | Somaia |
The quiz drafts and results stored in your browser hold your answers. To remove them, clear this site's data in your browser settings. Signing out does not remove them.
6. Other Services
- Supabase runs sign-in and our database; its sign-in cookies are listed above.
- Vercel hosts Somaia.
- Anthropic provides the AI replies; it sets no cookies.
- Practitioner search opens Google Maps (or Apple Maps on iPhone and iPad) in a new tab only when you press it. No map code loads on Somaia before that.
- Payments are handled on Stripe's checkout page. Its cookies are set there, under its own policy, not on Somaia.
7. Contact
For cookie-related questions, reach us through our contact form or email support@somaia.app.