Cookie Policy

QB510K uses a single cookie and a single piece of browser local storage. We do not use analytics cookies, advertising cookies, social-media tracking pixels, or any third-party tag manager. This policy explains exactly what is set, when, and why.

1. The session cookie

After you sign in, the Platform sets one cookie that lets your browser stay signed in across requests.

• Name — qb510k_dev_session
• Type — first-party, strictly necessary (functional)
• Attributes — HttpOnly, SameSite=Lax, Path=/
• Value — a JSON-encoded object containing your bearer access token, user id, organisation id, role, and display name. The token authorises calls from the Vercel server to the API; it never reaches JavaScript on the page.
• Lifetime — up to 8 hours of inactivity. Deleted when you sign out.
• Set by — the Platform's own server (Next.js Server Action on Vercel).

Because this cookie is strictly necessary to operate the Platform, it is set without a separate consent prompt. If you decline to allow it, you cannot sign in.

2. The cookie banner acknowledgement

We display a banner explaining the cookie use the first time you visit the marketing pages. To remember that you have dismissed the banner, the Platform writes one entry to your browser's localStorage.

• Key — qb510k_cookie_ack_v1
• Type — browser local storage (not a cookie; not sent to the server)
• Value — the literal string "1"
• Lifetime — until you clear your browser data or remove the entry manually.

3. Third-party cookies

Our hosting providers (Vercel and Fly.io) and security tooling (Sentry) may set operational cookies in narrow circumstances such as load balancing, geo-routing, or DDoS protection. These are not used to identify you across sites and are not controlled by us. We do not knowingly run any third-party advertising, analytics, or social-media script on our pages.

4. Your choices

• You can sign out at any time, which deletes the session cookie.
• You can clear cookies and local storage through your browser's settings; doing so will sign you out and re-show the cookie banner.
• You can configure your browser to refuse cookies, but the Platform will not be usable in that state.

5. Changes

If we add a new cookie or local-storage entry, we will update this policy and bump the version suffix on the cookie banner so returning users see the updated notice.

6. Contact

Questions? Write to vamsy@qbridge.ai.