Skip to content

Cookie Policy

Effective Date: March 10, 2026 Last Updated: March 10, 2026

This Cookie Policy explains how RepairOps (“we,” “us,” or “our”) uses cookies and similar technologies when you use the RepairOps platform at app.repairops.com, the customer portal, and the documentation site at docs.repairops.com.


Cookies are small text files stored on your device (computer, tablet, or mobile phone) when you visit a website. They help the website remember your preferences, maintain your session, and improve your experience. Similar technologies include localStorage, sessionStorage, and HTTP authentication tokens.


RepairOps uses a minimal set of cookies, all of which are necessary for the Service to function or to remember your preferences. We do not use advertising, tracking, or behavioral analytics cookies.

These cookies are essential for the Service to operate. They cannot be disabled.

Cookie / Storage KeyPurposeDurationSet By
sb-access-tokenSupabase authentication session tokenSession (expires on browser close or after configured timeout)Supabase Auth
sb-refresh-tokenRefreshes expired access tokens without requiring re-authentication7 daysSupabase Auth
sb-auth-tokenStores authentication state for Supabase clientSessionSupabase Auth
__Host-next-authNext.js session cookie for SSO/SAML flows (Enterprise tier only)SessionNext.js
csrf-tokenProtects against cross-site request forgery attacksSessionRepairOps

These cookies remember your preferences and settings to provide a better experience. You can disable these, but some features may not work as expected.

Cookie / Storage KeyPurposeDurationSet By
themeRemembers your dark/light mode preference1 yearRepairOps
sidebar-collapsedRemembers whether the navigation sidebar is collapsed or expanded1 yearRepairOps
shop-contextRemembers which shop location you last selected (multi-shop organizations)SessionRepairOps
kanban-filtersRemembers your Kanban board filter preferencesSessionRepairOps
localeRemembers your language/locale preference1 yearRepairOps

The customer portal uses token-based authentication (not Supabase Auth). These cookies are set when a customer accesses their repair status.

Cookie / Storage KeyPurposeDurationSet By
portal-tokenCustomer portal access token (32-byte hex)90 days (matches token expiry)RepairOps
portal-themeCustomer’s dark/light mode preference in the portal1 yearRepairOps

Shop floor displays use a separate authentication mechanism.

Cookie / Storage KeyPurposeDurationSet By
display-tokenShop floor display access tokenPersistent (until revoked)RepairOps

To protect your privacy, RepairOps does not use:

  • Advertising cookies — No Google Ads, Facebook Pixel, or ad network cookies
  • Third-party tracking cookies — No cross-site tracking or behavioral profiling
  • Analytics cookies — No Google Analytics, Mixpanel, Amplitude, or similar tools
  • Social media cookies — No Facebook, Twitter, or LinkedIn tracking widgets
  • Fingerprinting — No browser fingerprinting or device identification beyond standard session management

If we add analytics in the future, we will use privacy-respecting, first-party analytics (such as Plausible or Fathom) and update this policy accordingly.


The following third-party services may set cookies when you interact with embedded features:

ServiceWhen SetPurposeTheir Policy
StripeWhen you visit the billing page or payment formsPayment processing sessionStripe Cookie Policy
Google OAuthWhen you sign in with GoogleAuthentication handshakeGoogle Privacy Policy

These cookies are set by the respective third parties and governed by their privacy policies. RepairOps does not control these cookies.


In addition to cookies, RepairOps uses browser storage APIs for application state:

KeyStorage TypePurpose
supabase.auth.tokenlocalStoragePersists authentication state across page reloads
kanban-column-orderlocalStorageRemembers custom Kanban column ordering
recent-ticketssessionStorageCaches recently viewed ticket IDs for quick navigation
draft-notessessionStorageAuto-saves unsaved diagnostic notes to prevent data loss

These are not transmitted to our servers and are stored only in your browser.


You can manage cookies through your browser settings:

  • Chrome: Settings > Privacy and Security > Cookies
  • Firefox: Settings > Privacy & Security > Cookies and Site Data
  • Safari: Preferences > Privacy > Manage Website Data
  • Edge: Settings > Cookies and Site Permissions

If you disable strictly necessary cookies, you will not be able to log in or use the Service. If you disable functional cookies, some preferences (like dark mode) may not persist between sessions.

RepairOps respects the Do Not Track (DNT) browser signal. Since we do not use tracking cookies, DNT has no practical effect on our cookie behavior — we already do not track you.


We may update this Cookie Policy to reflect changes in our practices or for legal, regulatory, or operational reasons. Changes will be posted on this page with an updated “Last Updated” date. Material changes will be communicated via email or in-app notification.


For questions about our use of cookies: