This policy covers cookies and similar technologies, such as browser storage, used on aluma.app and in the aluma app. aluma is run by ALUMA FZ-LLC.
We only use technologies that are needed for the website to work, for signing in, for security, to remember settings you choose, and to remember that you've seen our cookie notice. We do not use advertising or marketing cookies.
We use Plausible Analytics in a setup that does not use cookies or persistent identifiers. It is designed not to keep raw IP addresses or raw browser details. It processes limited usage information, such as which pages are visited, device type and approximate location. We do not send account details, email addresses or anything about uploaded files to Plausible.
Cloudflare (United States) may process technical information to protect the site from bots and attacks.
Supabase (United Kingdom) processes sign-in information to keep you logged in.
Sentry (European Union) receives technical details when something goes wrong on a page, so we can fix it, and from a small sample of page loads, so we can check speed. We take private links and anything typed into forms out of these reports first.
When you pay or manage your billing, you use pages run by Stripe (a US company), which sets its own cookies on those pages.
If you turn on notifications, your browser's own notification service (run by Google, Apple or Mozilla, depending on your browser) delivers them.
Plausible is based in the European Union. Our privacy policy explains what each provider receives and the safeguards for any transfer outside the UK.
sb-[project]-auth-token
Cookie on app.aluma.app. Sent only over secure connections and hidden from page scripts (Secure, HttpOnly, SameSite=Lax). May be split into parts ending .0, .1
aluma_portal_staff
Cookie on app.aluma.app. Sent only over secure connections and hidden from page scripts (Secure, HttpOnly, SameSite=Lax)
aluma-cookie-consent
Browser storage on each aluma address you visit. Never sent to our servers
aluma-start-here-hidden
Browser storage on app.aluma.app. Never sent to our servers
sw.js
Service worker on app.aluma.app
Cloudflare Turnstile
Inside Cloudflare's check box, on challenges.cloudflare.com
| Name | Set by | Purpose | How long it lasts | Ours or third party |
|---|---|---|---|---|
| sb-[project]-auth-tokenCookie on app.aluma.app. Sent only over secure connections and hidden from page scripts (Secure, HttpOnly, SameSite=Lax). May be split into parts ending .0, .1 | aluma, using Supabase | Keeps you signed in | Until you sign out, or up to 400 days | Ours |
| aluma_portal_staffCookie on app.aluma.app. Sent only over secure connections and hidden from page scripts (Secure, HttpOnly, SameSite=Lax) | aluma | Remembers which business a staff member last opened in the staff portal | 12 months | Ours |
| aluma-cookie-consentBrowser storage on each aluma address you visit. Never sent to our servers | aluma | Remembers that you have seen our cookie notice, so it does not keep appearing | Until you clear your browser data | Ours |
| aluma-start-here-hiddenBrowser storage on app.aluma.app. Never sent to our servers | aluma | Remembers that you hid the “Start here” checklist on your dashboard | Until you show it again or clear your browser data | Ours |
| sw.jsService worker on app.aluma.app | aluma | Lets aluma show notifications on your device. Only set up if you turn notifications on | Until you turn notifications off or clear your browser data | Ours |
| Cloudflare TurnstileInside Cloudflare's check box, on challenges.cloudflare.com | Cloudflare | Checks you are a real person on sign-in, sign-up and other public forms. Cloudflare keeps some data in your browser for this check, inside its own check box | Set by Cloudflare | Third party |
You can see our cookie notice again at any time using the link at the bottom of every page. You can also block or delete cookies in your browser, but some parts of aluma, like signing in, won't work without the essential ones.
If we ever want to use a non-essential cookie or similar technology, we will ask for your consent first and update this page.
Email hello@aluma.app.
Last updated: 1 October 2026