Legal
Cookie Policy
What we store on your device, why, and how to switch off anything that is not strictly necessary.
Last updated: 10 August 2026
In force — some details still being finalised
This describes what we store on your device today. Every cookie listed below was checked against what the site actually sets, and the choice you make here takes effect immediately. Wording is still pending legal review alongside the Privacy Policy.
Showing: United States — we could not detect your region, so this is the default.
Location detection is a convenience only. Your actual rights depend on where you live, not on what this page guessed.
1. What this covers
"Cookies" here means cookies and the equivalent storage a browser offers, such as local storage. We use very few, and we list every one of them below rather than describing them in categories and leaving you to guess.
We do not use advertising cookies, we do not run ad networks, and we do not sell or share this data with data brokers.
2. Strictly necessary
These make the site work. They cannot be switched off from here, because without them you could not stay signed in or move between pages.
| Name | Set by | What it does | Lasts |
|---|---|---|---|
| sb-<project>-auth-token | Supabase (our authentication provider) | Keeps you signed in. Without it you would be logged out on every page load. | Session, refreshed while you stay active |
| active_location_id | Runday | Remembers which of your locations you are currently looking at, so the calendar and staff pages show the right one. | Persistent until changed or cleared |
| __cf_bm and similar | Cloudflare | Bot detection and protecting the site from abuse. | Up to 30 minutes |
3. Functional
These remember a small preference. They do not identify you personally.
| Name | Set by | What it does | Lasts |
|---|---|---|---|
| runday_voter_token | Runday (browser local storage, not a cookie) | A random value so the public roadmap can tell one voter from another without asking you to create an account. It is not linked to your name or email. | Persistent until you clear site data |
4. Analytics, and your choice
We use Google Analytics to count visits and see which pages people actually use. It is the only non-essential thing we load, and it is the only category you should have to make a decision about.
| Name | Set by | What it does | Lasts |
|---|---|---|---|
| _ga, _ga_<id> | Google Analytics | Counts visitors and shows which pages get used, so we know what to improve. This is the category you can decline. | Up to 2 years |
Analytics does not load until you accept it. Google's script is not placed on the page at all until then — not loaded in a limited mode, simply absent. If you decline, or if you have not answered yet, no Google cookie is set and no request is made to Google from this site.
If your browser sends a Global Privacy Control signal, we treat that as a refusal without asking you again.
Your current setting
Loading your current setting…
Google Analytics processes data outside Canada. Its own handling is described in Google's privacy policy, and you can opt out across all sites with Google's browser add-on.
5. Controlling cookies yourself
Every major browser lets you see, block, and delete cookies for a site, usually under Privacy settings. Blocking the strictly necessary ones will sign you out and stop parts of Runday working — that is a consequence of blocking them, not a fault.
6. If you are outside Canada
To be written: United States — state-level opt-out signals including Global Privacy Control.
7. Questions
Email [email protected]. See also our Privacy Policy and Confidentiality Policy.