Last updated September 4, 2026
Cookie Policy
This Cookie Policy explains the cookies and similar browser-storage technologies the Jinu website uses, why we use them, and how you can control them. It should be read together with our Privacy Policy.
What cookies and similar technologies are
Cookies are small text files a website stores on your device. Similar technologies, such as local storage, keep information in your browser in the same way. We group everything Jinu uses into four categories: strictly necessary, functional, first-party analytics, and error monitoring. We do not use advertising cookies or tracking pixels, we do not use advertising networks or any third-party cross-site tracking, and we never sell your personal information.
Strictly necessary
These keep you signed in and let the Service work. They are always on and do not require consent.
| Name or key | Purpose | Retention |
|---|---|---|
| sb-* (Supabase auth) | Keeps you signed in across pages | Session or up to the sign-in token lifetime |
| CSRF / same-origin token | Protects state-changing requests from cross-site forgery | Session |
| Load and routing cookies | Keep requests on a consistent server and route them correctly | Session |
| jinu_cookie_consent | Remembers your cookie choice so the banner does not reappear | About 180 days if you accept, about 10 years if you decline, so a refusal does not lapse |
Functional
These remember the choices you make so the Service is more convenient. They are stored on your device.
| Name or key | Purpose | Retention |
|---|---|---|
| Language and locale | Remembers your chosen display language | Persistent (until cleared) |
| Marketplace and display preferences | Remembers settings such as your default view | Persistent (until cleared) |
| Recently viewed | Shows the listings you looked at recently | Persistent (until cleared) |
Product analytics
Our measurement of how the Service is used (for example, funnel and usage events) so we can improve it. Some of it is processed by a product-analytics provider acting as our processor; requests are served from our own domain rather than a third-party script host. It is never tied to an advertising network and never sold. In the Jinu apps for iPhone and Android it is on by default, and you can turn it off under Settings, then Privacy and data. On the web in the United States it is on by default and you can turn it off at any time using the Cookie settings link in the site footer, or the control on this page. On the web outside the United States it runs only after you accept the cookie banner. Signed-in users can also turn it off in Settings. If you have already told us not to measure your use, we keep that answer and this default does not override it. If your browser sends a Global Privacy Control signal, analytics stays off wherever you are, whatever else is saved (see Section 07). Under the same setting we also record your own session, meaning the pages you move through and where you click, so we can see where the site confuses people. Everything you type, every message, other members' names and handles, addresses, phone numbers, email addresses, and checkout and billing pages are masked in your browser before anything is sent; public listing photos, titles and prices can appear. Turning analytics off turns recording off with it. Our Privacy Policy, Section 05, describes recordings in full.
| Name or key | Purpose | Retention |
|---|---|---|
| sl_sid | A random per-browser id so usage is counted per session, not per raw hit | Persistent (until cleared) |
| jinu_auth_seen | Notes that this browser's current sign-in has already been counted, so refreshing does not count it again | Persistent (until cleared) |
| Funnel and usage events | Records of searches, journeys, and similar actions. These sit closest to a server log, so they carry the shorter window | Up to 90 days on our servers |
| Listing view events | Records that a listing was viewed, which is what produces a seller's view count and their 30, 60, and 90-day analytics | Up to 180 days on our servers |
| ph_* (product analytics) | Identifies a browser across visits so usage is measured per person, not per hit. Set by our product-analytics provider through our own domain | Persistent (until cleared) |
| Session recordings (product analytics) | A recording of your own pages and clicks, with typed text, messages, other members' names, contact details and payment pages masked, held by our product-analytics provider (PostHog) in the United States | Per the provider's retention setting, currently 30 days |
Error monitoring
A diagnostics service (Sentry) that captures errors so we can fix them, and a separate, limited error-replay recording used only for debugging. Error replay is never on by default anywhere, including in the United States. It runs only if you accept it, using the banner or the Cookie settings link in the site footer, or the control on this page, and it stays off if your browser sends a Global Privacy Control signal. It is not the product-analytics session recording in Section 04: that one follows the analytics setting, this one needs your acceptance in every region. Basic error reports may be captured to keep the Service secure and working.
| Name or key | Purpose | Retention |
|---|---|---|
| Sentry error events | Captures errors and diagnostic context to fix problems | Per our provider's standard retention |
| Sentry error replay | Limited recording of a session to debug an error (needs your acceptance in every region) | Per our provider's standard retention |
Affiliate referral
Jinu runs an affiliate programme in which approved affiliates are paid a share of revenue from members they introduce. If you arrive through an affiliate's link (an address of the form jinu.app/r/, followed by their handle), we set one first-party cookie so that, if you go on to create an account, we know which affiliate to credit.
| Name or key | Purpose | Retention |
|---|---|---|
| jinu_pref | Records which affiliate link you arrived through, so a commission can be attributed if you create an account | 30 days |
It holds an affiliate's public handle and the time you arrived, and nothing about you. It is not used for advertising, it is not shared with the affiliate or anyone else, it does not follow you to other sites, and the affiliate never learns who you are: an affiliate sees counts and totals, never the people behind them. It is only written when the link belongs to an approved affiliate, and it is replaced if you later arrive through a different one.
You can delete it in your browser at any time. Doing so simply means no affiliate is credited if you sign up.
Managing your consent
What you see on your first visit depends on where you are. In the United States, we do not interrupt you with a banner. First-party analytics, including session recording, is on by default; error replay is not; and you can turn analytics off at any time with the Cookie settings link in the site footer, or the control on this page. Everywhere else, including the European Economic Area, the United Kingdom and Switzerland, a banner asks first: product analytics, session recording and error replay do not run until you accept, and you can choose "Essential only." Strictly necessary cookies and basic error monitoring run either way, as Sections 03 and 06 describe. We remember your choice in a first-party cookie so the banner does not reappear on every visit.
If you have previously chosen "Essential only", that answer stands. We do not switch analytics back on for anyone who has told us not to measure their use, wherever they are.
You can change or withdraw your choice at any time using the Cookie settings link in the site footer, or the control on this page, which reopens the banner. Signed-in users can also turn analytics off in Settings. Most browsers additionally let you view, delete, or block cookies through their settings, although blocking strictly necessary cookies may stop parts of the Service from working.
Global Privacy Control. Some browsers and browser extensions can send a Global Privacy Control signal on your behalf. It is a standing request not to have your personal information sold or shared, and several state privacy laws treat it as a valid opt-out. We honor it: when your browser sends it, product analytics, session recording and error replay stay off for the whole visit, whatever choice is saved in your cookie, and we do not show you the banner. You do not need to do anything else. Because we record that as an "Essential only" choice, turning the signal off again leaves analytics off until you change it in cookie settings. See our Do Not Sell or Share My Personal Information page for the wider set of rights this signal is part of.
If you have questions about this Cookie Policy, contact us at privacy@jinu.app. For more on how we handle personal information, see our Privacy Policy.