Last updated September 6, 2026
Cookies and Device Storage
Headroom uses browser features to keep your session working and support the installed web app. This notice covers the current invited testing release.
Essential sign-in storage
Supabase authentication cookies maintain and refresh your session. Their duration depends on session and provider settings, and signing out clears the app’s session cookies for that browser. During private testing, OpenAI Sites may place separate cookies for its outer access gate. Clearing one service’s cookies may not sign you out of the other.
Installed app and notifications
Your browser can install the app manifest, icons, and service worker. If you enable push, the browser maintains a push subscription and Headroom stores its endpoint and keys to deliver notifications. The current service worker does not cache private workspace responses for offline use. Removing the app does not necessarily delete your online account or all browser site data.
Your controls
Use browser privacy settings to inspect or clear site data, block cookies, or revoke notification permission. These choices may prevent sign-in or other essential features from working. Optional reminders can also be turned off in Headroom’s account settings. The current release does not place advertising or optional analytics cookies; if that changes, we will update the notice and provide any consent controls required by law.