Cookie Policy
What cookies MateALIGN™ uses, why we use them, and how to control them.
Effective Date: June 21, 2026 · Last Updated: June 21, 2026
1. Who We Are
This Cookie Policy applies to the websites and services operated by ANumberOne, LLC ("MateAlign," "we," "our," or "us"), including:
- matealign.com/site — our public marketing website
- matealign.com — our relationship and social compatibility application (requires account)
For questions about this policy, contact us at: privacy@matealign.com
2. What Are Cookies?
Cookies are small text files that are stored on your browser or device when you visit a website. They allow websites to recognize your device across page loads, keep you logged in, remember your preferences, and collect information about how you use the site.
Beyond cookies, we may also use related technologies that work similarly:
- Local Storage / Session Storage — browser-side data stores used to temporarily persist form progress and session state in our application.
- Tokens — cryptographically signed tokens stored in cookies to authenticate your session.
3. Categories of Cookies We Use
We use cookies in the following categories. Note that strictly necessary cookies do not require your consent — they are essential to provide the service you have requested. All other categories are either disclosed for transparency or, where required by applicable law, subject to your consent.
3.1. Strictly Necessary Cookies
These cookies are essential for MateAlign to function. Without them, you cannot log in, navigate between pages, or use the application. They cannot be disabled.
| Cookie / Token | Provider | Purpose | Duration |
|---|---|---|---|
| sb-[project-ref]-auth-token | Supabase (MateAlign) | Authenticates your user session after login. Stores a signed JWT (JSON Web Token) that verifies your identity on each request. | Session (expires when you log out or your session expires, typically up to 1 hour with automatic refresh) |
| sb-[project-ref]-auth-token-code-verifier | Supabase (MateAlign) | Stores a PKCE code verifier during the email verification and OAuth callback flows. Ensures the authorization code exchange cannot be intercepted. | Short-lived — cleared after the auth callback completes |
| CSP Nonce (response header only) | MateAlign | A cryptographically random value generated per request and used in our Content Security Policy to prevent cross-site scripting (XSS) attacks. Not stored client-side as a cookie. | Per-request — not persisted |
Legal basis: Strictly necessary for the performance of our service (legitimate interest / contractual necessity). No consent required.
3.2. Functional / Security Cookies
These cookies enable security features and functional improvements. They support bot protection and fraud prevention.
| Cookie / Token | Provider | Purpose | Duration |
|---|---|---|---|
| cf-turnstile-* / Turnstile challenge token | Cloudflare | Used during account signup to verify that the request comes from a human, not a bot. Cloudflare Turnstile is a privacy-preserving CAPTCHA alternative that does not track you across sites. | Short-lived — per-challenge |
Legal basis: Legitimate interest in protecting our platform and users from fraudulent or automated abuse. These cookies do not track behaviour or build advertising profiles.
Cloudflare Privacy Policy: https://www.cloudflare.com/privacypolicy/
3.3. Payment Processing Cookies
These cookies are set by our payment processor when you access billing or pricing pages within the authenticated application. They are used for fraud detection and transaction integrity.
| Cookie / Token | Provider | Purpose | Duration |
|---|---|---|---|
| __stripe_mid | Stripe | Device fingerprint used by Stripe to detect fraudulent payment attempts. Set when Stripe.js loads on billing pages. | ~1 year |
| __stripe_sid | Stripe | Session identifier used by Stripe to detect fraudulent payment attempts within a browsing session. | Session |
Important: Stripe cookies are only set on authenticated pages where billing functionality is present (e.g. pricing and billing management pages). They are not set on the public marketing site (/site).
Legal basis: Legitimate interest in preventing payment fraud and ensuring payment integrity. These cookies are not used for advertising.
Stripe Privacy Policy: https://stripe.com/privacy
3.4. Analytics Cookies (Not Currently Active)
We do not currently use analytics cookies on matealign.com. If we introduce analytics tools in the future (such as Google Analytics, PostHog, or Plausible), we will update this policy and, where required by applicable law, request your consent before setting any analytics cookies.
If and when analytics cookies are added, they will be disclosed here with:
- The analytics provider name
- What data is collected
- How long cookies persist
- How to opt out
3.5. Third-Party Embed Cookies (Conditional)
Our marketing website may in the future embed content from third parties (such as video players, scheduling tools, or social sharing features). If third-party content is embedded, those third parties may set their own cookies when that content loads on your device. We do not control those cookies and they are governed by the relevant third party's privacy policy.
We will update this policy if and when third-party embeds are added. Where required by law, we will obtain your consent before loading third-party embeds that set cookies.
4. Cookies by Surface
4.1. Public Marketing Website (/site)
The marketing website currently sets no cookies by default when you browse without clicking into the application. No analytics, no advertising, no tracking pixels are present.
If a consent banner is shown, it is because we are transparently offering you control over any future non-essential cookies before they would be placed.
4.2. Authenticated Application
When you create an account and log in, the following cookies are active:
- Supabase session cookies (strictly necessary)
- Cloudflare Turnstile tokens (functional, during signup only)
- Stripe cookies (payment processing, on billing pages only)
5. Your Rights and Cookie Controls
5.1. Browser Controls
You can control or delete cookies at any time through your browser settings. Instructions for common browsers:
- Chrome: chrome://settings/cookies
- Firefox: about:preferences#privacy
- Safari: Settings → Safari → Privacy & Security
- Edge: edge://settings/privacy
Please note that disabling strictly necessary cookies will prevent you from using core features of the application, including logging in.
5.2. Opt-Out Links
| Provider | Opt-Out / Privacy |
|---|---|
| Cloudflare | https://www.cloudflare.com/privacypolicy/ |
| Stripe | https://stripe.com/privacy — Stripe does not use payment cookies for advertising |
| Supabase | https://supabase.com/privacy — session cookies only; no advertising use |
5.3. Your Rights Under Applicable Privacy Laws
Texas Residents (Texas Data Privacy and Security Act — TDPSA): If you are a resident of Texas, you have the right to confirm whether MateAlign processes your personal data, to access that data in a portable format, to correct inaccuracies, and to request deletion of your personal data. You also have the right to opt out of profiling that produces legal or similarly significant effects, and to appeal any denial of a rights request by contacting privacy@matealign.com with the subject line "TDPSA Rights Appeal." MateAlign will respond to verified requests within 45 days, with one permitted extension of an additional 45 days where reasonably necessary. To exercise your rights, contact privacy@matealign.com.
California Residents (CCPA/CPRA): You have the right to know what personal information is collected and shared, to opt out of the sale or sharing of personal information, and to request deletion of your data. We do not sell or share your personal information with third parties for advertising purposes. To exercise your rights, contact privacy@matealign.com.
Canadian Residents (PIPEDA — Excluding the Province of Québec): MateAlign does not currently offer the Service in the Province of Québec. If you are located in Canada outside Québec, you have the right to access personal information we hold about you and to challenge its accuracy. Contact privacy@matealign.com for any requests.
6. Data Retention
Cookie retention periods are listed in the tables above (Section 3). Where cookies store personal data (e.g. session tokens), that data is governed by our Privacy Policy and is retained only as long as necessary to provide the service.
7. Do Not Track
Some browsers send a "Do Not Track" (DNT) signal. Because we do not currently use tracking or analytics cookies, this signal has no material effect on how our site currently operates. We will revisit our DNT handling if analytics cookies are introduced.
8. Children's Privacy
MateAlign enforces a hard age gate of 18+ at registration and does not knowingly collect personal data from individuals under 18. If you believe a person under 18 has registered, please contact privacy@matealign.com.
9. Changes to This Policy
We may update this Cookie Policy to reflect changes in our technology, legal requirements, or data practices. For material changes, we will provide at least 30 days' advance notice by updating this page and, where we hold your contact details, by sending an email notification. Minor clarifications may be made without advance notice. We will always update the "Last Updated" date at the top of this page when changes are made.
We encourage you to review this policy periodically.
10. Contact Us
For questions or concerns about our use of cookies or your privacy rights, please contact:
MateAlign Privacy Team Email: privacy@matealign.com
MateAlign currently serves residents of the United States and Canada (excluding the Province of Québec). If you are not satisfied with our response to a privacy or data request, please contact us at privacy@matealign.com to request an escalated review.
© 2026 MateALIGN™. All rights reserved. Privacy Policy · Terms of Service