Cookie Policy
Effective Date: September 13, 2026
1. Summary
BoddByTodd uses a small number of cookies and similar technologies (localStorage). Strictly necessary ones — the login session and your consent choice — are always on because the site cannot work without them. Everything else (Vercel Analytics and Speed Insights) stays off until you press “Accept analytics” in the banner or on this page. We do not use advertising cookies, social-media pixels, or cross-site tracking, and we do not sell or share your personal information.
2. Manage your choice
Your current choice
Loading your current choice…
Changing to “decline” stops new analytics loading immediately. To also clear scripts already running on this page, reload it.
3. Cookies and storage we use
| Name | Set by | Purpose | Category | Lifetime |
|---|---|---|---|---|
| sb-*-auth-token (and related sb-* cookies) | Supabase Auth (first-party) | Keeps you logged in to your program and coaching app between pages. | Strictly necessary | Session / up to 1 year (refreshed while you use the site) |
| bbt_cookie_consent + localStorage key bbt-cookie-consent | BoddByTodd (first-party) | Remembers whether you accepted or declined analytics so we don't ask again. | Strictly necessary | 180 days |
| Vercel Web Analytics (script + /_vercel/insights requests) | Vercel Inc. (third-party) | Counts page views and which pages are visited. Vercel's analytics are cookieless and store a hashed, non-identifying visitor value that resets every 24 hours. | Analytics — only after you accept | No cookie; hashed value expires after 24 hours |
| Vercel Speed Insights (script + /_vercel/speed-insights requests) | Vercel Inc. (third-party) | Measures how fast pages load so we can fix slow ones. Collects performance timings and coarse device/connection info. | Performance — only after you accept | No cookie |
| Stripe (js.stripe.com, __stripe_mid, __stripe_sid) | Stripe, Inc. (third-party) | Fraud prevention and payment processing. Only set on Stripe's own checkout pages when you pay — not on boddbytodd.com pages. | Strictly necessary for payment | Set by Stripe — see stripe.com/cookies-policy |
4. Other third-party resources
The Inter typeface is loaded from Google Fonts. Google receives your IP address and browser details when the font file is requested; it does not set cookies for this. Your intake data is sent server-side to Anthropic’s Claude API to build your program and to Resend to email it to you — neither runs code in your browser or sets cookies. See the Privacy Policy for full details on each provider.
5. Browser controls and Do Not Track
You can also block or delete cookies in your browser settings, but blocking the Supabase session cookie will log you out. Because analytics only run after you opt in, we treat a “Do Not Track” or Global Privacy Control signal the same way as not having accepted: nothing non-essential loads until you choose to accept.
6. Questions
Email coach@boddbytodd.com with any questions about cookies or your data.