Cookie Policy
AETERNUM AI LLC — WorkHeroes OS
Version 1.0 · Last updated 7 September 2026
This policy explains which cookies and similar technologies WorkHeroes OS uses, why, and what choices you have. It complements our Privacy Policy.
1. What we use, in one sentence
We use only strictly necessary cookies — the ones that keep you signed in and keep the service secure — plus some settings stored in your own browser. We use no advertising cookies, no third-party analytics, no tracking pixels and no social media trackers.
Because of this, no consent banner is required under Article 5(3) of the ePrivacy Directive and its national implementations (in Spain, Article 22.2 LSSI): strictly necessary cookies are exempt. If we ever add non-essential cookies, we will ask for your consent first, and this policy will be updated before they are set.
2. Cookies we set
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
sb-<project>-auth-token (and its numbered fragments) | Keeps your authenticated session with the platform. Set by our authentication provider, Supabase, as a first-party cookie. Without it you cannot stay signed in. | Strictly necessary | Session, renewed while you remain active; expires on sign-out |
wh_guest_demo_session | Identifies a guest demonstration session so the sandbox keeps its state. It is bound to an environment containing fictitious data only, with no access to real customer workspaces. | Strictly necessary | Duration of the demonstration session |
| OAuth / integration state cookies | Short-lived cookies that protect the return leg of an integration connection flow against forgery (CSRF). Only set if you start such a flow. | Strictly necessary | Minutes |
Session cookies are set with the HttpOnly, Secure and SameSite attributes where the flow allows it, so they cannot be read by scripts in the page.
3. Settings stored in your browser (localStorage)
The application stores some preferences in your own browser, using localStorage. This is not a cookie: the information is never sent to our servers and stays on your device until you clear it.
- appearance: theme (light/dark), accent colour, interface font, icon style;
- layout: sidebar collapsed or expanded, chosen view in lists (table, board, calendar), column widths, sort order;
- convenience: unsent message drafts, recent AI conversation history in the assistant panel, whether you have dismissed a tutorial.
You can delete all of it by clearing site data for this domain in your browser. The application will simply return to its default appearance.
4. Cookies we do not use
- Advertising or remarketing cookies.
- Google Analytics or any equivalent third-party analytics.
- Social media buttons or embedded trackers.
- Cross-site fingerprinting.
Web fonts are bundled and served from our own domain, so displaying a page does not send your IP address to a font provider.
5. Usage measurement without cookies
We record certain events in our own database — such as authentication events, actions performed in the platform and errors — together with the IP address of the request, for security, audit and troubleshooting purposes. This is first-party logging, not cookie-based tracking, and it is described in section 4 of the Privacy Policy.
6. Managing cookies
You can block or delete cookies in your browser settings. Note that blocking strictly necessary cookies will prevent you from signing in: the application cannot work without them.
- Chrome: Settings → Privacy and security → Third-party cookies
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Settings → Privacy
- Edge: Settings → Cookies and site permissions
7. Third-party pages
When you activate an integration (for example a messaging channel), you interact with that provider's own systems, which may set their own cookies under their own policies. Those flows are described in our Subprocessors page.
8. Changes
We will update this policy whenever the technologies we use change. The version and date at the top identify the current text.
9. Contact
Questions about this policy: [email protected] — AETERNUM AI LLC, 15442 Ventura Blvd., Ste 201-2085, Sherman Oaks, California 91403, United States.