Cookie Policy
Last updated: May 8, 2026
This Cookie Policy explains how Waybound AS (organization number 937 496 184), operating SpaceMD, uses cookies and similar storage technologies on our website and service. It implements our obligations under ePrivacy Directive 2002/58/EC, the Norwegian ekomloven §2-7b, the UK Privacy and Electronic Communications Regulations (PECR), and equivalent rules in other jurisdictions.
1. What Are Cookies and Similar Technologies
Cookies are small text files placed on your device when you visit a website. Similar technologies include web beacons, pixels, local storage (used by some of our analytics providers), and session storage. Throughout this policy "cookies" refers to all of these.
2. Categories We Use
2.1 Strictly necessary
Essential for the service to function and exempt from consent under ePrivacy Art. 5(3). Examples: authentication tokens, CSRF protection, load-balancing.
2.2 Functional
Enable enhanced functionality and personalisation that is not strictly necessary, such as remembering your theme or editor preferences. Set only with your consent.
2.3 Analytics
Help us understand how visitors interact with SpaceMD so we can improve it. Set only with your consent. Includes Google Analytics on the public marketing website and PostHog within the application.
2.4 Marketing
Used to deliver relevant content and measure the effectiveness of our communications. Set only with your explicit consent. We currently do not run third-party advertising cookies; if we begin to, the cookie-preferences UI will offer a separate toggle and the table in section 3 will be updated.
3. Cookies and Storage in Use
Names, durations, and providers may change. The current snapshot:
| Name / pattern | Provider | Category | Storage | Duration | Purpose |
|---|---|---|---|---|---|
| sb-*-auth-token | Supabase (1st-party) | Necessary | Cookie / localStorage | Session — up to 60 days | Authentication |
| spacemd_cookie_consent | SpaceMD (1st-party) | Necessary | localStorage | 12 months | Stores your cookie preference |
| _ga, _ga_* | Google LLC (Google Analytics 4) | Analytics | Cookie | 13 months | Web analytics on marketing pages |
| ph_* | PostHog Inc. | Analytics | localStorage / cookie | 12 months | Product analytics, session identifier, error tracking |
| __stripe_mid, __stripe_sid | Stripe, Inc. | Necessary (fraud) | Cookie | Session / 12 months | Set on payment pages for fraud prevention |
4. Third-Party Recipients
Some cookies and storage are set by third-party services we use:
- Google LLC — Google Analytics 4 on the public marketing website. See Google's Privacy Policy.
- PostHog Inc. — Product analytics and error tracking inside the application. PostHog uses local storage (and cookies in some configurations) to maintain a session identifier. See PostHog's Privacy Policy.
- Stripe, Inc. — Sets cookies on pages where payment is processed for fraud prevention. See Stripe's Privacy Policy.
- Cloudflare, Inc. — Sets a `__cf_bm` bot-management cookie on edge-served pages. Considered strictly necessary for security. See Cloudflare's Privacy Policy.
A full list of sub-processors is published at /sub-processors.
5. Managing Cookies
You can manage your preferences at any time using the Open cookie preferences button at the top of this page or by clearing site data in your browser. You can also block or delete cookies through your browser settings; if you block strictly-necessary cookies, parts of SpaceMD may not function.
6. Consent & Withdrawal
When you first visit our website we present a cookie banner offering a choice between essential-only cookies, accept all non-marketing cookies, or granular per-category control. We obtain your consent for non-essential cookies in accordance with applicable laws. Strictly necessary cookies do not require consent because they are essential for the service to operate.
Withdrawing consent is as easy as giving it: open the cookie preferences from the button above (or from the footer link) and toggle categories off. Changes take effect immediately.
7. U.S. Residents
If you are a California resident or a resident of a state with a comparable law (Virginia, Colorado, Connecticut, Utah, Texas, Montana, Oregon, and others), see also our Privacy Policy — U.S. Residents section. We honour Global Privacy Control (GPC) signals as a valid opt-out from "sale" or "sharing" of personal information. We do not currently sell or share personal information for cross-context behavioural advertising. See Do Not Sell or Share My Personal Information.
8. Changes to This Policy
We may update this Cookie Policy from time to time. The updated policy will be posted on our website with a revised "Last updated" date.
9. Contact
For questions about our use of cookies, contact us at:
Waybound AS
Organization number: 937 496 184
0763 Oslo, Norway
Email: privacy@spacemd.ai