Cookie Policy

This policy applies to the public website at usechiefos.com — the marketing pages, this Cookie Policy itself, the Privacy Policy, the Terms of Service, and any other pages a visitor can reach without logging in. For data we collect inside your authenticated portal (jobs, expenses, time entries, customer records), see our Privacy Policy.

Cookies are small text files a website saves on your device. They do things like keep you logged in, remember a setting, or measure how the site is used. Some cookies are set by ChiefOS directly. Some are set by services we use (third-party cookies). Some last for a single browser session; others stay until they expire or you clear them.

Strictly necessary

These are required for the site to work and cannot be turned off. They do not track you across other sites.

• Supabase Auth session — keeps you signed in to your portal across page loads.
• Cloudflare Turnstile — bot-prevention challenge on signup, login, and the contact form.
• chiefos_cookie_consent — remembers your choice on this banner so we don’t ask again on every page. ~13 months.

Analytics

We use Plausible Analytics — a privacy-focused product that does not track individuals, does not use third-party cookies, and does not build cross-site profiles. We learn things like “the pricing page is the most visited” — not who visited it. You can opt out via the Cookie preferences link at the bottom of any page.

Marketing

We do not currently set marketing cookies and do not run advertising pixels. If we add any in the future, they will require renewed consent — your existing accept/reject choice will be re-prompted before any marketing cookie is set.

Preferences

UI state cookies — for example, remembering whether you collapsed a sidebar in the portal. These do not track you and do not leave your device.

The following third parties may set cookies or similar identifiers when you use ChiefOS. Each link points to that provider’s own privacy information.

• Supabase — authentication, database, file storage. Privacy Policy.
• Cloudflare — Turnstile bot protection on forms and (for the apex domain) DNS proxy. Privacy Policy.
• Plausible Analytics — privacy-focused site analytics, only loaded if you accept analytics cookies. Privacy Policy.
• Vercel — hosting and edge infrastructure. May set technical cookies for traffic routing. Privacy Policy.
• Stripe — payment processing, only on checkout pages. Privacy Policy.
• Postmark — transactional and contact-form email delivery. Does not set browser cookies. Privacy Notice.

• Session cookies — deleted when you close your browser.
• Authentication session — approximately 7 days, then re-authentication is required.
• Consent cookie — approximately 13 months. You will be re-prompted to confirm or update your choices when it expires or when this policy changes materially.
• Analytics — Plausible does not use persistent identifiers. No cross-visit tracking cookies are set.

You can change your cookie choices at any time using the Cookie preferences link in the site footer (or by clicking the inline link here). You can also clear or block cookies in your browser:

• Google Chrome
• Safari (macOS)
• Firefox
• Microsoft Edge

Blocking strictly-necessary cookies will break login and bot-protection checks, but you remain in control either way.

Canada — PIPEDA and Quebec Law 25

Under PIPEDA and (for Quebec residents) Law 25, you have rights to access your personal information, request corrections, withdraw consent, and lodge a complaint with the Office of the Privacy Commissioner of Canada or the Commission d’accès à l’information du Québec.

European Union and United Kingdom — GDPR / UK GDPR

If you are in the EU, EEA, or UK, you have rights to access, rectification, erasure, restriction of processing, data portability, and to object to processing. We rely on consent for non-essential cookies and on legitimate interest for strictly-necessary processing.

California — CCPA / CPRA

California residents have rights to know what personal information is collected, to request deletion, to correct inaccurate information, and to opt out of sale or sharing. ChiefOS does not sell personal information.

To exercise any of these rights, use our contact form or write to privacy@usechiefos.com.

If we make material changes to how we use cookies — for example, adding a new third-party processor or a new category — we will update this policy, update the “Last updated” date, and re-prompt the consent banner so you can review the change before continuing.

Questions about this policy? Use our contact form or write to privacy@usechiefos.com.