Legal
Cookie policy
This version is dated 21 October 2026 and replaces the version of 15 October 2026. Questions about it go to privacy@ikonetu.com.
What this policy covers
This policy lists every cookie and every item of browser storage that the IkonetU website and app use. A cookie is a small file that a website stores in your browser. Local storage is a similar store on your device that a website's scripts can read.
IkonetU uses no analytics, advertising or tracking cookies. The website serves its own fonts, so no font request goes to another company.
Everything we store on your device
Each item below comes from the IkonetU code or from a check of what Supabase's storage sends back.
| Name | Type | What it does | How long it lasts |
|---|---|---|---|
| ik_access | A cookie that IkonetU sets | It holds the sign-in token that tells the app who you are. Scripts on the page cannot read it. | Up to 400 days. The token inside it lasts one hour, and the app renews it. Signing out removes the cookie. |
| ik_refresh | A cookie that IkonetU sets | It holds the token that the app uses to renew your sign-in, so that you stay signed in. Scripts on the page cannot read it. | Up to 400 days. Signing out removes it. |
| ik_pending_sign_in | A cookie that IkonetU sets | It holds your email address between asking for a sign-in code and entering it, so that the address never appears in a web address. Your browser sends it only to the sign-in pages. | 10 minutes. It is deleted once you sign in. |
| ik_pkce | A cookie that IkonetU sets | It holds a one-time secret that ties a sign-in link, or a sign-in with Google, to the browser that asked for it, so that only that browser can complete the sign-in. | 10 minutes. It is deleted once the sign-in is complete. |
| ik_signin_via | A cookie that IkonetU sets | It records that you chose to sign in with Google, so that if the sign-in does not finish the page can say so. Your browser sends it only to the page Google returns you to. | 10 minutes. It is deleted when you return from Google. |
| ik_flash | A cookie that IkonetU sets | It holds a one-time message for the next page, such as “Your pitch is saved.” | 60 seconds. It is deleted when the next page shows the message. |
| __cf_bm | A cookie that Cloudflare sets for Supabase | Supabase stores pitches and evidence files behind Cloudflare. When your browser loads a pitch video or a document, Cloudflare sets this cookie to tell people apart from automated traffic. It is set on supabase.co, not on IkonetU. | 30 minutes. |
| ikonetu-side | Local storage on your device | It remembers whether you chose the founder path or the investor path, so that those links come first. It never leaves your browser. | Until you choose “Forget my choice” on the home page or clear your browser's storage. |
Why we do not ask for consent
The law allows a website to store an item without consent when the item is strictly necessary to provide a service that you ask for. The five IkonetU cookies sign you in, keep you signed in and carry the result of a form, and Cloudflare's cookie protects the storage that holds pitches and documents, so each of them is strictly necessary. The local storage item remembers only a choice that you made on the page, and you can remove it at any time.
Your choices
You can delete cookies and local storage in your browser's settings, and you can tell your browser to block them. If you block the IkonetU cookies, you cannot sign in. If you block Cloudflare's cookie on supabase.co, pitches and documents may not load.
Changes
We post each new version of this policy here with its date. The privacy policy explains how we use personal data.