This policy explains what cookies and similar technologies CoinShed uses and why. We use the minimum necessary — no advertising trackers, no third-party data brokers.
CoinShed uses cookies for one primary purpose: to keep the platform functioning correctly and securely. Specifically, we use cookies to manage your authenticated session so that you remain logged in as you navigate the platform. We do not use cookies for advertising, retargeting, or to build profiles for sale to third parties. We do not display third-party advertising on CoinShed, and we have no advertising network partners.
These cookies are strictly necessary for the platform to operate. Without them, you cannot log in or maintain a session. They are set automatically when you sign in and are deleted when your session ends or you sign out. They include:
These cookies are set by CoinShed's authentication infrastructure (Supabase) and are scoped to the CoinShed domain. They do not track your activity across other websites. Because these cookies are essential to platform security, they cannot be disabled while you are signed in. If you prefer not to have any cookies set, you can use CoinShed in a signed-out state to browse public listings.
CoinShed uses PostHog, a privacy-focused product analytics tool, to understand how users interact with the platform in aggregate. PostHog sets cookies to distinguish unique visits and track usage patterns such as page views and feature interactions. This helps us improve the platform over time.
PostHog is configured to collect only the minimum data needed: anonymous session identifiers and basic interaction events. If you are signed in, your Supabase account ID may be associated with your session to allow us to understand usage patterns across authenticated users. We do not share PostHog data with advertising networks, and PostHog operates under a strict data processing agreement. PostHog's privacy policy is available at posthog.com/privacy.
Beyond Supabase (authentication) and PostHog (analytics), CoinShed does not integrate any third-party services that set advertising, tracking, or retargeting cookies. We do not use social media tracking pixels, advertising networks, or retargeting services. We will update this section if we introduce any additional third-party tools that set cookies.
You can manage cookies through your browser settings. Most browsers allow you to view, delete, and block cookies from specific sites. Note that blocking authentication cookies will prevent you from signing in to CoinShed, as session cookies are essential to the platform. If you only browse public listings without signing in, no authentication cookies will be set. Instructions for managing cookies are available through your browser's help documentation. Under the Privacy Act 2020 (NZ), you also have the right to access and correct personal information we hold about you, including information derived from session data associated with your account. Contact us at admin.coinshed@gmail.com to exercise these rights.
Authentication session cookies are deleted when you sign out or when your session expires (typically after a period of inactivity). Persistent authentication tokens — which allow you to remain signed in across browser restarts — are retained for up to one year or until you sign out, whichever comes first. We use the minimum retention period necessary for each cookie's stated purpose.