LegalCookie Policy
Last updated June 14, 2026
What this covers
This page explains what cookies and similar storage technologies Milo uses on the web and in the iOS app, why we use them, and how you can control them. For the broader picture of how we handle your personal data, see the Privacy Policy.
In short: Milo uses minimal first-party storage to keep you signed in and to count product usage. No advertising trackers, no cross-site identifiers.
What we use, and why
The Milo web app and the Milo iOS app store the following on your device:
sb-…-auth-tokenStrictly necessary
Supabase session — keeps you signed in. Stored in browser localStorage (web) or WKWebView storage (iOS app). Cleared on sign-out and account deletion.
ph_…Analytics (first-party)
PostHog session and distinct ID. Used to count product events like 'recording started' or 'post copied'. No advertising use, no cross-site tracking.
_vercel_jwt, _vercel_no_cacheStrictly necessary
Set by Vercel for routing and performance. Required for the site to function reliably.
_vercel_speed_insightsAnalytics (first-party)
Set by Vercel Analytics to measure page load performance. Aggregate; no personal identifiers.
The web app also uses a small amount of localStorage for purely client-side preferences (e.g., dismissing the install prompt). These are not cookies, but most privacy regulations treat them equivalently — so we list them here for transparency.
What we don't use
- Advertising cookies, retargeting pixels, or third-party ad networks.
- Cross-site or cross-app tracking identifiers, including the IDFA on iOS.
- Social-media tracking pixels (Facebook Pixel, X conversion tracking, etc.).
- Session replay tools that record what you type or click in detail.
Managing what gets stored
- Sign out: Clears your Supabase session token from local storage.
- Delete your account: Settings → Danger zone → Delete account purges your data on our servers and signs you out everywhere.
- Browser settings: Most browsers let you block cookies entirely or clear them per site. Doing so will sign you out of Milo and may prevent the app from working.
- Global Privacy Control (GPC): If your browser sends the GPC signal, we treat it as an opt-out of any “sale” or “sharing” under CCPA-equivalent laws — see the Privacy Policy.
- iOS: The Milo iOS app does not request the IDFA and does not show an App Tracking Transparency prompt because we do not track across other apps or websites.
Changes to this policy
If we add or remove storage technologies — for example, integrating a new analytics provider — we will update this page and bump the “Last updated” date at the top.