Cookies & storage
Cookie policy
This is an unusual cookie policy, because there is very little to disclose.
The marketing site (these pages)
The pages under shyapps.com — home, product, about, help, safety, and the legal pages — are static HTML. They set no cookies, run no analytics, and include no third-party trackers. The only structured content in them is schema.org metadata for search engines.
The app (/welcome and signed-in surfaces)
The SHY app stores data in your browser's local storage. All of it is strictly necessary or functional — none of it is advertising or cross-site tracking:
| What | Category | Purpose | Lifetime |
|---|---|---|---|
| Session token (Supabase auth) | Strictly necessary | Keeps you signed in | Until sign-out or expiry |
| App preferences (settings, theme, onboarding state) | Functional | Remembers your choices on this device | Until you clear them or delete your account |
| Service worker cache | Strictly necessary | Faster loading and offline resilience | Replaced on each release |
| Push registration (Firebase, only if you enable notifications) | Functional | Delivers the notifications you asked for | Until you disable notifications |
Because nothing here is used for advertising or cross-site tracking, SHY does not show a cookie-consent banner. If that changes, this page and the product will change first.
Audited against the shipped code on August 19, 2026.