Steeryn · Legal
Cookie Policy
Version 2026-10-17 (effective date)
This policy covers cookies set by steeryn.com, operated by Costa Technology Advisory LLC ("Steeryn").
The short version: Steeryn sets only the cookies needed to sign you in and keep the app working. There are no analytics cookies, no advertising cookies, and no third-party tracking of any kind.
Cookies we set
All of these are first-party and strictly necessary for the Service to function:
| Cookie | Purpose | Lifetime |
|---|---|---|
Authentication session cookies (sb-*, set by our auth provider, Supabase) | Keep you signed in; refreshed as you use the app | Session / refreshed while active |
reef_active_membership | Remembers which workspace (company/role) you are acting in when your account has more than one; validated server-side on every request | Session (cleared when the browser closes) |
xero_oauth | One-shot security (CSRF) token set only when a manager starts connecting an accounting account; verified and deleted when the connection completes | 10 minutes, single use |
What we do not use
- No analytics cookies (no Google Analytics, PostHog, Plausible, or similar).
- No advertising or social-media cookies, pixels, or tags.
- No cross-site tracking of any kind.
For completeness: we run error monitoring (Sentry) to catch application errors. It does not set cookies, records no session replays, and personal data is scrubbed from its reports.
Managing cookies
You can block or delete cookies in your browser settings, but because every cookie above is functional, blocking them will prevent sign-in and break the Service. Since we set no optional cookies, there is nothing to opt out of, and the Service shows no cookie-consent banner because only strictly necessary cookies are used.
Changes
If we ever add a cookie (for example, an analytics tool), we will update this policy first and, where required, ask for consent before setting it.
Questions: steeryn@costasails.com.