Table of Contents
1. What Are Cookies?
Cookies are small text files that a website places on your device when you visit. They allow the site to recognise your device, remember your preferences, and provide core functionality.
We also use related technologies such as Local Storage (a browser-based data store that persists across sessions). Both cookies and local storage are described in this policy.
2. How We Use Cookies
TestOn AI uses cookies exclusively to:
- Keep you logged in between sessions (authentication cookies);
- Maintain your session state during use (session cookies);
- Remember your preferences (theme, language settings);
- Enable secure payments via Stripe;
- Support Google OAuth login (if you choose this option).
3. Cookies We Use
| Cookie Name / Type | Purpose | Duration | Type |
|---|---|---|---|
| sb-access-token (Supabase Auth) |
Stores your authentication session token. Keeps you logged in securely. | 1 hour (refreshed automatically) | Essential |
| sb-refresh-token (Supabase Auth) |
Allows your access token to be refreshed without re-login. | 60 days | Essential |
| Session cookie (HTTP-only) |
Maintains your active session. Set as HTTP-only to prevent access by scripts. | Session (expires on browser close) | Essential |
| theme | Remembers your selected interface theme (dark / light / study). | 1 year | Functional |
| Google OAuth cookies (accounts.google.com) |
Manages the Google Sign-In flow. Set only when you choose to log in with Google. | Session / Google-defined | Third-Party |
| Stripe cookies (__stripe_mid, __stripe_sid) |
Used by Stripe to identify your browser for fraud prevention during payment sessions. | 1 year / Session | Third-Party |
4. Local Storage
In addition to cookies, we use browser Local Storage to store certain data on your device:
| Key | Purpose | Duration |
|---|---|---|
| User preferences (theme, UI settings) |
Stores your interface preferences so they persist between sessions without a server round-trip. | Until cleared by user or account deletion |
| Session auth tokens (Supabase) |
Supabase may store auth token data in local storage as a fallback where HTTP-only cookies are unavailable. | Until logout or token expiry |
| Multiplayer room state | Temporarily stores room session data for reconnection handling. | Session only |
Local Storage data is stored entirely on your device and is not transmitted to our servers unless you are actively using the Service.
5. Third-Party Cookies & Services
The following third-party services may set cookies when you interact with them through our platform:
Stripe (Payment Processing)
When you visit our pricing page or initiate a payment, Stripe sets cookies on your device to prevent fraud and ensure secure transaction processing. These cookies are governed by Stripe's own Privacy Policy.
Google (OAuth Sign-In)
If you choose to log in with your Google account, Google sets cookies to manage the authentication flow. These are governed by Google's Privacy Policy. Google Sign-In is entirely optional.
Supabase (Authentication & Database)
Supabase sets HTTP-only authentication cookies to manage your login session securely. These are essential for the Service to function. For details, see Supabase's Privacy Policy.
6. Cookies We Do NOT Use
We explicitly do not use:
- Advertising or marketing cookies;
- Third-party analytics cookies (e.g., Google Analytics, Facebook Pixel);
- Cross-site tracking cookies;
- Cookies to build behavioural or demographic profiles;
- Retargeting or remarketing cookies.
7. Managing Cookies
7.1 Essential Cookies
Authentication and session cookies are strictly necessary for the Service to function. You cannot opt out of these cookies while using the Service. If you disable them via your browser, you will not be able to log in.
7.2 Browser Controls
You can manage or delete cookies through your browser settings. Instructions for common browsers:
- Chrome: Settings → Privacy and security → Cookies and other site data
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy → Manage Website Data
- Edge: Settings → Cookies and site permissions → Cookies and site data
7.3 Local Storage
You can clear Local Storage data via your browser's developer tools (Application → Local Storage) or by clearing all site data in your browser settings.
7.4 Opt-Out of Google Sign-In
Google OAuth is optional. If you prefer not to use Google Sign-In, you can register and log in with an email and password instead.
8. Changes to This Policy
We may update this Cookie Policy from time to time to reflect changes in our technology or legal obligations. We will notify you of material changes by updating the "Effective date" at the top of this page and, where appropriate, by email notification.
9. Contact Us
If you have any questions about our use of cookies, please contact us:
TestOn AI – Cookie Enquiries
Email: testonai.tech@gmail.com
Website: www.testonai.com
App: www.testonai.online