Legal
Cookie Policy
Last updated: October 4, 2026
This Cookie Policy explains how Big Spawn LLC (“Big Spawn”, “we”, “us”) uses cookies and similar technologies on our websites and applications. It works together with our Privacy Policy. The Privacy Policy describes what personal data we process and why; this page focuses specifically on cookies.
What are cookies?
Cookies are small text files that a website places on your device when you visit. They allow the site to recognize your device on subsequent requests, remember preferences, keep you signed in, and measure how the site is performing. We also use closely related technologies (such as localStorage and sessionStorage) which behave like cookies for the purposes described below. We refer to all of them as “cookies” throughout this page.
Categories of cookies we use
Strictly necessary cookies
These cookies are required for the Services to function and cannot be disabled in our systems. They are set in response to actions you take that amount to a request for the Service, for example signing in, submitting a form, or setting a preference. Examples: Supabase authentication session cookies, CSRF tokens, consent-intent cookies that bridge social-auth flows. Under ePrivacy guidance and GDPR Recital 30, strictly necessary cookies do not require prior consent because they are strictly necessary to deliver a service the user has actively requested.
Functional cookies
These cookies let the Services remember choices you make (such as your preferred theme, your saved privacy choices, and UI notices you have dismissed) so the experience is consistent across visits. They store no marketing or behavioral data.
Analytics
We use one privacy-preserving, first-party analytics service: Vercel Web Analytics — and it sets no cookies at all. It measures aggregate page views and performance on our own pages. Visits are counted with a short-lived identifier derived server-side from the incoming request and discarded within 24 hours; nothing is stored on or read from your device, nothing tracks you across other websites, and no advertising profile is built. Because it needs no cookies and collects only anonymous, aggregated measurements, it runs without a consent prompt — and you can switch it off at any time via the “Privacy Choices” link in the footer. If you previously declined cookies under our old consent banner, that choice is preserved and analytics stays off for you. We do not run Google Analytics, Facebook Pixel, Meta SDK, Mixpanel, Amplitude, or any comparable cross-site third-party analytics.
Advertising measurement cookies (bigspawn.com only)
One use, on one site: measuring our own Google ads. The public pages of bigspawn.com load the Google tag for Google Ads so we can tell whether our ads bring visitors there and on to signing up. It sets first-party cookies on bigspawn.com whose names begin with _gcl_ (for example _gcl_au, and _gcl_aw when you arrive from an ad click); they last up to 90 days. Google may also read or set its own cookies on its domains (such as doubleclick.net) to count conversions and prevent ad fraud; those are governed by Google's cookie policy.
It is configured for measurement only: personalized advertising and remarketing are switched off, and it runs in Google's restricted data processing mode. It never runs in our product apps, on the business websites our customers publish with us, or in signed-in dashboards. We do not run advertising on our properties, and we place no tracking pixels or remarketing tags for third parties.
You can switch “Ad measurement” off at any time in the “Privacy Choices” panel; we then delete the _gcl_ cookies it set. In the European Economic Area, the United Kingdom and Switzerland it sets and reads no cookies unless you switch it on.
Third-party cookies during checkout
When you make a purchase, you are handed off to our payment processor, Polar Software, Inc. (“Polar”), acting as merchant of record. Polar sets its own payment, fraud-prevention, and session cookies during checkout on the polar.sh domain. Those cookies are governed by Polar’s own privacy policy; we do not read or control them. When checkout completes, you are returned to a Big Spawn page where only our own cookies are set.
How to manage cookies
Every major browser provides controls that let you accept, reject, or delete cookies, and warn you before a cookie is stored. The specific controls live in:
- Chrome: Settings → Privacy and security → Cookies and other site data
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Settings → Privacy
- Edge: Settings → Cookies and site permissions → Cookies and site data
If you block strictly necessary cookies in your browser, parts of the Services that rely on authentication or form submission will not work. For example, you will not be able to stay signed in across pages.
Global Privacy Control and Do Not Track
Modern browsers may send a Global Privacy Control (GPC) or Do Not Track (DNT) signal indicating that you prefer not to be tracked. We honor both, concretely: if your browser sends GPC or DNT and you have not made an explicit choice in our Privacy Choices panel, our anonymous usage analytics does not run for you at all. An explicit choice you make in the panel — on or off — takes precedence over the browser signal in both directions, because it is the more specific instruction you have given us. The same signals keep Google Ads measurement on bigspawn.com from loading at all, unless you have switched ad measurement on yourself. We run no remarketing and no cross-site advertising profiles. Strictly necessary cookies remain in use regardless of these signals, consistent with ePrivacy guidance.
Changes to this policy
If we change how we use cookies, for example by adding a new analytics or third-party tool, we will update the “Last updated” date at the top of this page, and where the change is material we will surface a notice in-product before the change takes effect.
Contact
Questions about our use of cookies: privacy@bigspawn.com.