Cookie Notice
This Cookie Notice explains what cookies are, which ones Doodlik uses, and what your rights are. It should be read alongside our Privacy Policy.
The short version: at launch, Doodlik sets exactly one cookie — a strictly necessary authentication cookie set by Supabase. We do not use advertising cookies, tracking cookies, or third-party analytics cookies. You do not need to consent to anything to use the site — but we still want you to know what is there.
1. What Are Cookies?
In short: Cookies are small files stored in your browser that help websites remember things about you.
Cookies are small text files that a website places on your device when you visit. They are widely used to make websites work, remember your preferences, and provide information to the website operator.
Cookies are not the only way websites can store information. Similar technologies include local storage, session storage, and pixels. This notice covers all such technologies where they are used by Doodlik, not just cookies in the strict technical sense.
2. What Types Of Cookies Exist?
In short: Cookies fall into two categories: ones that are essential for the site to work, and ones that are optional. We only use essential ones right now.
- Strictly necessary cookies. These are essential for the website to function. They enable things like logging in and staying logged in. Under UK PECR, these do not require your consent.
- Functional cookies. These remember your preferences (such as language or display settings). They are not essential but improve your experience. Consent is required.
- Analytics cookies. These track how the website is used in aggregate, to help us understand and improve it. Consent is required unless the analytics tool is cookieless and does not identify individuals.
- Advertising and targeting cookies. These track your browsing across websites to show you relevant ads. Consent is always required. Doodlik does not use these.
3. What Cookies Does Doodlik Use?
In short: At launch, Doodlik sets exactly one cookie, set by Supabase for authentication. No consent is needed for this.
The table below lists every cookie set by Doodlik.
| Cookie name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| sb-dykukwkxngrsxujtanrm-auth-token | Supabase | Stores your authentication session so you remain logged in. Set with the Secure flag, meaning it is only transmitted over HTTPS. | Strictly necessary | Session / persistent (refreshed automatically) |
Cookie name
No other cookies are set by Doodlik at launch. If this changes, we will update this notice and, where required by law, ask for your consent before setting any new non-essential cookies.
4. Strictly Necessary Cookies — Detail
In short: This cookie is set by Supabase, our authentication provider. It is essential for login to work and is protected by the Secure flag, meaning it only travels over HTTPS.
Supabase is our database and authentication provider. When you log in to Doodlik, Supabase sets one cookie in your browser to maintain your authenticated state. Without it, you would be logged out every time you navigated to a different page.
This cookie:
- Does not track your activity across other websites
- Does not share data with advertisers
- Contains only the minimum information needed to keep you logged in securely
- Is transmitted only over HTTPS (Secure flag is set)
- Is deleted when your session ends or when you log out
Because this cookie is strictly necessary for the service to function, UK PECR does not require us to obtain your consent before setting it. We must, however, inform you it exists — which is what this notice does.
5. Netlify Analytics — Why No Consent Is Needed
In short: We use Netlify’s built-in analytics to understand basic traffic patterns. It does not use cookies and does not identify you individually.
Doodlik is hosted on Netlify, which provides basic server-side analytics as part of its hosting infrastructure. Unlike tools such as Google Analytics, Netlify Analytics:
- Does not set any cookies in your browser
- Does not place any tracking scripts on the page
- Works by analysing server request logs, which exist regardless of any analytics tool
- Does not identify individual users or track behaviour across sessions
- Does not share data with any third-party advertising networks
Because Netlify Analytics is cookieless and does not involve any client-side tracking technology, it falls outside the scope of PECR’s consent requirements. No consent is needed and no opt-out mechanism is required for this tool.
6. Your Choices
In short: You can control cookies through your browser settings. Blocking strictly necessary cookies will prevent you from logging in.
You have the right to decide whether to accept or reject cookies. Because Doodlik currently only uses strictly necessary cookies, your practical options are:
- Accept all cookies (recommended). The Supabase authentication cookies work as described and you can use Doodlik normally.
- Block cookies via your browser settings. You can instruct your browser to refuse all cookies or to alert you when a cookie is being set. If you block cookies, you will not be able to log in to Doodlik, as the authentication cookies are essential for this.
Most browsers allow you to manage cookies through their settings. Here is where to find cookie settings in common browsers:
- Google Chrome: Settings → Privacy and security → Cookies and other site data
- Safari: Preferences → Privacy
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Microsoft Edge: Settings → Cookies and site permissions
You can also find more information about cookies and how to manage them at www.allaboutcookies.org.
7. Future Changes
In short: If we add analytics, advertising, or other non-essential cookies in the future, we will update this notice and ask for your consent before setting them.
We may introduce additional cookies or similar technologies in the future — for example, if we add a third-party analytics tool or introduce advertising. Before doing so, we will:
- Update this Cookie Notice to describe the new cookies in full
- Update our cookie consent banner to offer you a genuine choice about non-essential cookies
- Not set any non-essential cookies until you have actively consented
Specifically, if we introduce advertising cookies or third-party analytics in the future, we will implement a full consent management platform (CMP) with granular category controls, consistent with the ICO’s guidance on cookie consent.
Note for future advertising: if Meta Pixel, Google Ads, or similar advertising technologies are added at any point, explicit opt-in consent will be required before those cookies are set. Pre-ticking consent or using legitimate interests as a basis for advertising cookies is not permitted under PECR.
8. Contact Us
If you have any questions about how we use cookies, please contact us:
- Email: privacy@doodlik.com
- Post: Doodlik, Alexandra Gritsenko, 22 Hewett Street, London EC2A 3NL, United Kingdom
See also: Privacy Policy · Terms and Conditions · Cookie Notice