How Aluma uses cookies.

The current product uses essential cookies to keep practitioners and clients signed in through Supabase-backed authentication and to maintain secure access across protected routes.

When a practitioner connects Google Calendar or Zoom, Aluma uses short-lived state cookies to validate the OAuth handoff and reduce the risk of tampering or cross-site request forgery during that connection flow.

The current public site and application are not built around advertising trackers or a marketing-cookie layer. Aluma’s browser storage use is tied to product function, security, and connected-service flows rather than behavioral ad targeting.

Blocking essential cookies may prevent sign-in, workspace continuity, or integration handoffs from working correctly. Browser-level controls still remain available to the user, but some product features depend on these cookies to operate safely.