Cookies Policy — WeInspect
Version v1.1 — effective 2026-XX-XX
WeInspect uses a minimal number of cookies, only what is necessary for the service to work. No advertising trackers. No data resale.
30-second summary
┌─ Cookies in WeInspect ─────────────────────────────────┐
│ │
│ Essentials (required for the service) │
│ ────────────────────────────────────── │
│ ✓ Supabase authentication (session) │
│ ✓ Language (FR/EN), theme (light/dark), zoom │
│ ✓ CSRF protection │
│ │
│ Analytics │
│ ───────── │
│ ✓ Plausible — cookieless, anonymized, GDPR/Law 25 ok │
│ │
│ Local storage (offline) │
│ ─────────────────────── │
│ ✓ IndexedDB for offline captures (on your device) │
│ ✓ Service worker for PWA │
│ ✓ Never sent to a third party │
│ │
│ What we DO NOT have │
│ ─────────────────── │
│ ✗ Advertising cookies │
│ ✗ Facebook/LinkedIn pixels │
│ ✗ Google Ads │
│ ✗ Fingerprinting │
│ │
└────────────────────────────────────────────────────────┘Plain language: The bare minimum for the app to work, plus Plausible (which doesn't even use cookies). That's it.
1. What is a cookie
A cookie is a small text file your browser stores on your device. It allows a website to recognize you between two visits or during your browsing session.
WeInspect also uses some equivalent mechanisms (localStorage, sessionStorage, IndexedDB) for offline mode and application state persistence.
2. Cookies we use
2.1 Strictly necessary cookies (no consent required — Law 25 sec. 8.1)
| Cookie | Domain | Purpose | Duration | |---|---|---|---| | sb-access-token | ouiinspect.ca | Supabase authentication (active session) | Session or until logout | | sb-refresh-token | ouiinspect.ca | Secure session renewal | 7 days | | weinspect-locale | ouiinspect.ca | Stores your language (FR/EN) | 1 year | | weinspect-theme | ouiinspect.ca | Stores theme (light/dark/system) | 1 year | | weinspect-zoom | ouiinspect.ca | Stores interface zoom preference | 1 year | | csrf-token | ouiinspect.ca | CSRF attack protection | Session |
These cookies are essential to the service. You cannot disable them without losing access.
2.2 Local storage (functional equivalent)
| Mechanism | Content | Purpose | |---|---|---| | localStorage | UI preferences, persisted Zustand state | Personalization | | IndexedDB | Offline captures (photos, audio, metadata) | Offline mode: lets you continue working without network | | Cache API (service worker) | Static pages, JS/CSS resources | Performance + offline PWA shell | | sessionStorage | In-progress capture state | Recovery after accidental navigation |
The contents of IndexedDB and the service worker stay on your device. They are never sent to a third party. Synchronization happens only with our own servers (Supabase Canada) when you come back online.
2.3 Analytics cookies — Plausible (cookieless, GDPR/Law 25 compliant)
We use Plausible Analytics (privacy-first, cookieless, no individual tracking). Plausible:
- Uses no cookies
- Creates no user profile
- Uses no fingerprinting
- Anonymizes data (IP hashed + daily rotating salt, never stored)
- Is GDPR, CCPA, and Law 25 compliant without requiring a consent banner
2.4 No advertising cookies
WeInspect uses no advertising cookies, social network pixels (Facebook, LinkedIn, etc.), or attribution services (Google Ads, etc.) inside the authenticated application.
On our public marketing pages (/, /pricing, /migration, /blog, /help), we may use conversion pixels with your explicit consent via a cookie banner. You may decline without service degradation.
3. How to manage cookies
3.1 In WeInspect
From /settings/privacy/cookies, you can:
- See the list of all cookies active on your account
- See the contents of your localStorage and IndexedDB
- Clear IndexedDB (purge offline captures — warning, loss of unsynchronized data)
3.2 In your browser
You can delete WeInspect cookies or block all cookies from your browser settings:
- Chrome: Settings → Privacy and security → Cookies
- Safari: Preferences → Privacy
- Firefox: Settings → Privacy & Security
- Edge: Settings → Cookies and site permissions
⚠️ Warning: blocking essential cookies disables authentication and prevents WeInspect from working. Offline mode requires IndexedDB enabled.
3.3 Expo mobile application
On the mobile app, storage is managed by:
- Expo SecureStore: encrypted authentication tokens (equivalent of iOS Keychain / Android EncryptedSharedPreferences)
- Expo SQLite: persistent local database for offline captures
- Expo FileSystem: storage of raw photo and audio files
You can purge all local data by uninstalling and reinstalling the app, or via /settings/privacy/clear-local-data in the app.
4. Changes
If we add a new type of cookie, we will update this policy and notify you (in-app notification + email for substantial changes).
5. Contact
For any question:
- DPO: dpo@ouiinspect.ca
- Support: support@ouiinspect.ca
Last updated: 2026-XX-XX