Cookie Policy

• Orbis uses only the cookies it needs to sign you in and keep the site secure. There are no advertising or tracking cookies, and none from analytics.
• Your browser's local storage keeps your settings and, if you use Orbis without an account, your conversations. It stays on your device.
• Page visits are counted anonymously, without cookies. You can turn that off for your browser below, and Orbis respects your browser's Global Privacy Control and Do Not Track signals.
• Because Orbis only stores what it needs to work or what you ask it to keep, it doesn't show a cookie banner.

All of these are first-party cookies (set by tryorbis.app), strictly necessary, and never used for advertising or to follow you to other websites.

• sb-…-auth-token (Supabase) — keeps you signed in. Set when you sign in; removed when you sign out, and otherwise kept for up to 400 days while it's refreshed. A related sb-…-code-verifier cookie protects signing in with Google or GitHub and is removed once you're signed in.
• orbis_terms — remembers which version of the Terms of Service and Privacy Policy you accepted, so you aren't asked on every page. Up to 1 year.
• orbis_terms_pending — carries your acceptance through signing up with Google or GitHub. 30 minutes, removed when sign-up finishes.
• orbis_connect — protects the sign-in to an app you're connecting, so the connection can't be hijacked. 10 minutes, only on connection pages.
• orbis_guest — only if you use AI Lab or Signal Radar without an account: a random code that keeps your guest work together. 180 days.

Orbis also uses your browser's local storage and session storage. These aren't cookies: they aren't sent to our servers with each request, and they stay on your device unless a feature uses them — for example, without an account, your earlier messages are sent with a new message so the AI can follow the conversation.

• Display settings: theme, sidebar and panel sizes, and which menus you left open.
• Choices you make: the model you last picked for Chat and for Code, a copy of the model list so the model menu shows straight away, and whether this browser's visits are counted.
• Your work without an account: conversations, agents and their chats, the thumbs-up or thumbs-down you give replies, saved prompts, your own template versions, and results saved by the research tools (Trials, Benchmarks, Arena and claim reports).
• Short hand-overs between pages (session storage, cleared when you close the tab): a website request passed from the Code start screen to its project, and text passed to Verify.
• Getting started: whether you've seen the welcome and the one-time Code tip, and the last chat or project you had open, so Orbis can take you back to it.

With an account, your conversations and projects are stored with your account instead (see the Privacy Policy).

To see which pages are used, Orbis counts visits with Vercel Web Analytics. For each visit it records the page, the site you came from, and your country, browser, operating system and type of device.

• It uses no cookies and stores nothing on your device.
• Page addresses are cleaned before they're counted: everything after a “?” or “#” is removed, ids are replaced with [id], and the code in a shared link is replaced with [link].
• Visitors are told apart by a code worked out from the request, which Vercel discards after 24 hours, so visits aren't linked to you, your account or your IP address, or followed across days or other websites.
• When you pick one of the starting options on the first screen (such as “Coding”), which option it was is counted too — never what you type.
• Nothing is counted from your browser if you turn visit counts off (below, or in Settings → Privacy and data), or if your browser sends a Global Privacy Control or Do Not Track signal.

UK law (the Privacy and Electronic Communications Regulations) requires consent before a site stores or reads information on your device, except where that's strictly necessary to provide a service you asked for. Orbis's cookies are needed for signing in, security and the sign-up you started; its browser storage holds things you chose or created. Visit counts store nothing on your device, and you can turn them off. So Orbis doesn't ask for cookie consent.

If we ever add a cookie or storage item that isn't strictly necessary, we'll ask for your consent first and list it here.

• Signing out removes the sign-in cookies.
• Your browser's settings let you see and delete cookies and site data, or block them. If you block cookies for tryorbis.app, you won't be able to sign in.
• Clearing site data for tryorbis.app removes everything in local storage too. Without an account, that includes your conversations: download any you want to keep first (each chat's menu has Download).
• Visit counts can be turned off below or in Settings → Privacy and data.

When you leave Orbis — to sign in with Google or GitHub, connect an app, pay with Stripe once paid plans are on sale, or open a link in a reply — those websites may set their own cookies under their own policies.

We'll update this page when the cookies or storage Orbis uses change. Questions: support@tryorbis.app.