Below are the cookies FleetPath relies on to keep you signed in and to remember your theme, what each one is for, and how long it lasts.
- sb-<project-ref>-auth-token
- Purpose: keeps you signed in by holding your authenticated session, so you do not have to log in again on every page. Set by our authentication provider, Supabase. Type: strictly necessary (authentication). Duration: lasts for your signed-in session and is refreshed while you stay active; cleared when you sign out.
- fp_theme
- Purpose:remembers whether you chose the light or dark appearance, so the correct theme is shown the moment a page loads. The same preference is mirrored in your browser's local storage. Type: functional (preference). Duration: up to 400 days; you can clear it at any time from your browser.
The authentication cookie is set by Supabase and may be split into a few numbered parts (for example, names ending in .0 and .1) when the stored session is large. Those parts together represent a single session.
While the public site is gated ahead of general availability, opening our private unlock link sets one additional strictly-necessary cookie that unlocks the sign-in and sign-up pages. It stores only a one-way hash of an access key, never the key itself, is marked HttpOnly and Secure, lasts about thirty days, and does no tracking of any kind. It is removed once the public site opens.