Legal

Cookie Policy

We believe you should know exactly what we store in your browser and why. This page explains every cookie Nautilius Money uses — no surprises.

Effective date: June 19, 2026

What Are Cookies?

Cookies are small text files stored in your browser when you visit a website. They help websites remember information about your visit — like whether you're logged in — and allow certain features to work.

How We Use Cookies

Nautilius Money uses cookies for a narrow set of purposes: to keep you authenticated, to remember your preferences, and to understand aggregate usage patterns so we can improve the product. We do not use cookies to track you across other websites, build advertising profiles, or sell your data.

Cookies We Use

A full breakdown of every cookie category, what each one does, and whether you can disable it.

Strictly Necessary
Required

These cookies are required for the Service to function and cannot be disabled. They are set in response to your actions — such as logging in or filling out a form — and do not store any personally identifiable information.

sb-auth-token
Stores your encrypted session token so you remain logged in across page loads. Set by Supabase (our authentication provider).
sb-refresh-token
Allows us to silently refresh your session without requiring you to log in again. Expires after 7 days of inactivity.
__Host-next-auth.*
CSRF protection token for form submissions. Deleted when you close your browser.
Functional
Optional

Functional cookies remember your preferences and settings to give you a more personalized experience. Disabling these may reduce convenience but will not prevent you from using the Service.

wl_theme
Remembers your light/dark mode preference so it persists between sessions.
wl_dashboard_layout
Stores your last-viewed dashboard section and time period filter.
wl_onboarding_step
Tracks your progress through the onboarding flow so you can resume where you left off.
Analytics
Optional

Analytics cookies help us understand how users interact with the Service so we can improve it. All data is aggregated and anonymized — we cannot identify you from analytics data.

_ga, _ga_*
Google Analytics. Counts unique visitors and page views. Data is anonymized and retained for 13 months.
posthog_*
PostHog product analytics. Records which features are used most to help us prioritize improvements. No financial data is ever sent.
Third-Party Services
Required

Some cookies are set by trusted third-party services that power core functionality. These are governed by each provider's own privacy policy.

Plaid cookies
Set during the bank-connection flow. Used by Plaid to manage your OAuth session with your financial institution. Cleared once the connection is complete.
Stripe cookies
Set during checkout. Used by Stripe to detect fraudulent payments and comply with PCI DSS requirements.

Managing Your Cookie Preferences

Strictly necessary cookies cannot be disabled — the Service cannot function without them. For all other cookie categories, you can opt out by adjusting your browser settings or using the cookie preference center in your account settings. Note that disabling analytics cookies does not affect the quality of the Service.

Local Storage

In addition to cookies, Nautilius Money uses browser localStorage to store certain non-sensitive preferences (such as your financial health profile inputs and chart settings). This data never leaves your device and is not transmitted to our servers unless you explicitly save it to your account.

Retention Periods

Session cookies are deleted when you close your browser. Persistent cookies expire on the schedule listed in the table above. You can delete all cookies at any time through your browser's privacy settings — this will log you out of the Service.

Changes to This Policy

We may update this Cookie Policy to reflect changes in the cookies we use or for other operational, legal, or regulatory reasons. We will notify you of material changes by posting a notice in the app or by email.

Questions about our cookie practices? Contact us at privacy@nautilusmoney.com