Cookies in use
Session cookies let you sign in to the blog. PostHog analytics identifiers are stored only after you accept:
- sb-*-auth-token (Supabase): user session. Lasts until you sign out or it expires.
- sb-*-code-verifier (Supabase): protects the GitHub or LinkedIn sign-in. Removed when it completes.
- ph_* (PostHog): analytics identifiers and preferences in cookies and browser storage, only if you accept.
- portfolio-analytics-consent (local storage): remembers whether you allowed or declined analytics.
- Vercel Analytics measures visits without cookies; on this site it also waits for your consent.
Consent
Technical authentication cookies are necessary for the session you request. The banner lets you accept or decline PostHog and Vercel analytics before events are sent. The browser’s Do Not Track signal is respected. Declining analytics does not prevent browsing or using the blog.
How to remove them
To change your choice, clear this site’s cookies and local data and reload the page: the banner will appear again before new events are sent. Clearing data may also sign you out of the blog. To request deletion of data already submitted, write to hello@normansanchez.dev.