Last updated September 22, 2026
This Cookie Policy explains how Timebase, Inc. (“Company,” “we,” or “us”), the operator of Base, uses cookies, local storage, and similar technologies on Base’s websites and applications across every Base domain (the “Service”). This policy supplements our Privacy Policy and the Terms of Service.
You can review and change your preferences at any time by opening or via the “Your privacy choices” link in the site footer.
1. What cookies are
Cookies are small text files placed on your device when you visit a website. They allow a site to remember information about your visit (for example that you are signed in) so that subsequent visits are easier and more useful. We also use related technologies such as localStorage; for the purposes of this policy, those are referred to collectively as “Cookies.”
2. Categories we use
- Strictly necessary. Required for core functionality: authentication, session integrity, claiming your handle on the domain you chose, and recording your cookie preferences. These cannot be disabled without breaking the Service.
- Analytics & Performance. Optional. Anonymous metrics about how the site is used, to find slow pages and broken flows. Base does not currently set any Cookies in this category. If we add a measurement tool, it will only run with your consent and will be listed in the table below first.
Visits to a creator’s public Base page are counted for that creator’s own analytics on our servers, without Cookies or browser storage, and we honour Do Not Track and Global Privacy Control signals.
3. Cookies we set
The table below lists the Cookies Base sets. Authentication Cookies are issued by Supabase, our sign-in provider, under a name that includes our project identifier; consult that provider’s documentation for the exact format.
| Cookie | Category | Purpose | Retention | Source |
|---|---|---|---|---|
| sb-…-auth-token | Strictly necessary | Your signed-in session, set by Supabase Auth when you log in (it may be split into numbered parts). Required for the Studio and every signed-in page. | Up to 400 days, refreshed while you stay signed in | First-party (Base, via Supabase) |
| base_consent_region | Strictly necessary | Stores whether your IP was classified as a strict-consent region (EU/EEA/UK) so the correct defaults apply on first paint. | 30 days | First-party (Base) |
| base_consent_v1 (localStorage) | Strictly necessary | Records your saved cookie preferences for the optional category. | Until cleared | First-party (Base) |
| base_entry_domain | Strictly necessary | Remembers which Base domain you arrived from during signup so your handle is claimed on that domain. Set on the primary Base domain only, HttpOnly, and cleared once the handle is claimed. | 30 minutes | First-party (Base) |
| base_no_track | Strictly necessary | Legacy. Until September 2026 this was set when a Base owner asked to exclude their own visits from their page analytics. Base no longer sets or reads it; a copy already in your browser does nothing and expires on its own. Server-set and HttpOnly. | About 13 months from when it was set (no longer set) | First-party (Base) |
| base_no_track_done | Strictly necessary | Legacy. Marked that the retired self-exclusion setup above had finished in this browser. Base no longer sets or reads it; a copy already in your browser does nothing and expires on its own. Server-set and HttpOnly. | About 13 months from when it was set (no longer set) | First-party (Base) |
4. Base Booking
Base Booking runs at timebase.pro and mytimebase.com, and the live demo pages linked from this site open there. Those sites set their own Cookies, described in the Base Booking Cookie Policy.
5. Managing your preferences
You can change Analytics preferences at any time:
- — available from this page and from the site footer.
- Use your browser’s settings to block or delete cookies. Doing so may impair Service functionality.
- California residents can use the “Your privacy choices” link in the footer to access the “Do Not Sell or Share My Personal Information” toggle.
6. Regional rules
For visitors whose IP geolocates to the European Economic Area, the United Kingdom, or another jurisdiction with prior-consent requirements, optional Analytics cookies are denied by default until you make an affirmative choice through our consent banner.
Outside those jurisdictions, optional cookies are enabled by default; you may revoke consent at any time through Cookie preferences, and your choice persists across visits.
7. Changes to this policy
We may update this policy to reflect changes in our practices, the technologies we use, or applicable law. Material changes will be communicated via the Service. The “Last Updated” date at the top of this page reflects the latest revision.
8. Contact
Questions about this Cookie Policy can be sent to legal@timebase.pro.