Cookie Policy

Last updated: March 1, 2026 | Consent policy version: 1.0.0

We use necessary cookies to run core functionality, and optional cookies for analytics and marketing embeds. For EU/EEA and Brazil (and unknown regions), optional cookies are off until consent. For US users, we show a non-blocking notice with a Do Not Sell or Share opt-out.

Supabase authentication cookies (`sb-*`) and CSRF cookies are strictly necessary and are never blocked by consent choices.

Cookie / Key	Category	Purpose	Retention	Set By
sb-<project-ref>-auth-token (+ chunks)	Necessary	Supabase authentication session.	Session / up to 400 days depending on refresh cycle.	Underdogs / Supabase
sb-<project-ref>-auth-token-code-verifier (+ chunks)	Necessary	OAuth PKCE validation during login flow.	Short-lived during auth flow.	Underdogs / Supabase
__Host-underdogs-csrf / underdogs-csrf	Necessary	CSRF protection for API mutations.	12 hours (configurable).	Underdogs
cookie_consent_v1	Necessary	Stores your consent choices with version and timestamp.	Until replaced or cleared.	Underdogs
ud_region	Necessary	Stores your region bucket for compliance behavior.	30 days.	Underdogs
_ga, _ga_*	Analytics	Google Analytics page and event measurement.	Typically up to 24 months.	Google
_clck, _clsk	Analytics	Microsoft Clarity behavioral analytics.	Clarity-defined retention windows.	Microsoft
ph_<token>_posthog and related keys	Analytics	PostHog analytics and user/session persistence.	Typically up to 12 months by default.	PostHog
Third-party embed cookies (YouTube, Vimeo, TikTok, Instagram)	Marketing	Embedded media playback and engagement tracking.	Provider-defined.	Third parties

How To Manage Cookies

You can update choices any time via the cookie banner preferences. You can also remove cookies in browser settings; note that blocking necessary cookies may break authentication and secure actions.

Privacy and data requests: privacy@gounderdogtalents.com