Cookie Policy

1. What cookies are

Cookies and similar technologies (local storage, pixels) are small data files that help us keep you signed in, remember preferences, measure performance, and (with consent) show relevant ads.

2. Types we use

• Strictly necessary — authentication (Supabase/Google), security, load balancing. Always on; no consent needed.
• Functional — language, theme, "surprise me" state. Improves experience.
• Analytics — Google Analytics 4 to understand usage. Loaded only after consent.
• Advertising — Google AdSense for native/display ads. Loaded only after consent.

3. Cookie list

Name / provider	Purpose	Type	Duration
supabase-auth / Supabase	Keep you signed in	Necessary	Session / 1 yr
google-auth / Google	One-tap sign-in	Necessary	Session
_ga / Google Analytics	Usage analytics	Analytics	2 yrs
NID / Google Ads	Ad personalization	Advertising	6 mo
df_theme / Dreamfit	Remembers UI preferences	Functional	1 yr

4. Consent & banner

For non-essential cookies we show a consent banner on first visit (GDPR/ePrivacy). You can Accept all, Reject non-essential, or Manage preferences. Consent is recorded and you can change it anytime via the "Cookie settings" link in the footer.

5. How to control cookies

• Use our banner or footer "Cookie settings" to update choices.
• Set your browser to block or delete cookies (note: the service may not work fully without necessary cookies).
• For Google ads: adssettings.google.com; for analytics opt-out: gaoptout.

6. Changes

We may update this Policy; material changes are notified in-app. The "Last updated" date reflects the current version.

7. Contact