VarletCookie Policy
Version 1.0 · effective 2026-09-30
Cookie Policy
This Cookie Policy explains how Zink Labs LLC ("we," "us," or "our") uses cookies and similar technologies when you use Agent Harness, including https://glass-harness.vercel.app and the web app ("Service"). It describes what these technologies are, why we use them, and your rights to control our use of them.
Last Updated: September 30, 2026 | Version 1.0
1. What Are Cookies and Similar Technologies
Cookies are small text files stored on your device by your web browser when you visit a website. They are used to remember your preferences, maintain sessions, and provide functionality.
In addition to cookies, we use localStorage and sessionStorage (collectively, "browser storage"), which serve similar purposes under the ePrivacy Directive (Article 5(3)). References to "cookies" in this policy include these similar technologies unless otherwise stated.
2. Cookies and Browser Storage We Use
2.1 Essential Storage (Always Active)
These are strictly necessary for the Service to function and cannot be disabled. Under GDPR and the ePrivacy Directive, no consent is required for them.
| Name | Type | Provider | Purpose | Duration |
|---|---|---|---|---|
| h.refresh, h.access, h.until | localStorage | Agent Harness (first-party) | Keeps you signed in to the web app (Supabase session tokens and their expiry) | Until you sign out or clear site data |
| h.verifier | localStorage | Agent Harness (first-party) | One-time value that ties an email sign-in link to the browser that asked for it | Cleared when sign-in completes |
2.2 Preference and Functionality Storage
| Name | Type | Provider | Purpose | Duration |
|---|---|---|---|---|
| h.read | localStorage | Agent Harness (first-party) | The last message you saw, so the chat reopens where you left off | Until cleared by you |
| h.draft | localStorage | Agent Harness (first-party) | An unsent message, so a reload doesn't lose it | Until sent or cleared |
| Service worker and push subscription | Browser storage | Agent Harness (first-party) | Shows notifications you turn on in Settings | Until you turn notifications off or clear site data |
2.3 Third-Party Cookies and Tracking Technologies
| Name | Type | Provider | Purpose | Duration |
|---|---|---|---|---|
| Stripe checkout cookies | Cookie | Stripe, Inc. | Secure payment processing on Stripe Checkout and the billing portal (Stripe's pages, not ours) | Session |
| Site funnel counts | Request (no storage) | Agent Harness (first-party, on Cloudflare) | Counts a few website events (a visit, starting the demo, joining the waitlist) by name and day; nothing identifies you and nothing is stored in your browser | N/A |
| Cloudflare Turnstile | Script + cookie | Cloudflare, Inc. | Bot protection on the waitlist form, when enabled | Session |
2.4 What We Do Not Use
- No advertising pixels: we do not use Meta, Google Ads, Reddit, X or TikTok pixels.
- No sale of data: we do not sell your personal information.
- No cross-site behavioral profiling or social widgets.
3. How to Manage Cookies and Browser Storage
3.1 Browser-Level Controls
We use only essential and preference storage and first-party counts that store nothing in your browser, so there is no cookie banner. You can clear storage at any time in your browser settings; signing out also removes the sign-in values.
3.2 Browser Settings
Most browsers allow you to:
- View, delete, or block cookies from specific or all websites
- Set preferences for first-party vs. third-party cookies
- Clear localStorage and sessionStorage via Developer Tools > Application > Storage
Disabling essential cookies may prevent the Service from functioning correctly (e.g., you will not be able to stay logged in).
3.3 Common Browser Settings
- Chrome: Settings > Privacy and Security > Cookies and other site data
- Firefox: Settings > Privacy & Security > Cookies and Site Data
- Safari: Preferences > Privacy > Manage Website Data
- Edge: Settings > Cookies and site permissions > Cookies and site data
4. Do Not Track Signals
Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want to be tracked. Because there is not yet a common standard for interpreting DNT signals, we do not currently respond to DNT browser signals. We honor Global Privacy Control signals as an opt-out request.
5. California Residents (CCPA/CPRA)
We do not sell or share your personal information for cross-context behavioral advertising. For full CCPA/CPRA rights, see the Privacy Policy.
6. Versioning
This policy is versioned. If we materially change the cookies or storage we use, we publish a new version and update the date above.
7. Changes to This Cookie Policy
We may update this Cookie Policy if we add new cookies, change providers, or modify our practices. The "Last Updated" date at the top indicates the most recent revision. Material changes will trigger a consent version increment (Section 6) so you are prompted to review.
8. Contact Us
If you have questions about this Cookie Policy, please contact us:
Zink Labs LLC
Email: legal@zinklabs.dev
Florida residents may also direct cookie and privacy concerns to the Florida Attorney General:
Office of the Attorney General, State of Florida PL-01, The Capitol, Tallahassee, FL 32399-1050 Phone: 1-866-966-7226 | Online: MyFloridaLegal.com
Zink Labs LLC | legal@zinklabs.dev | zinklabs.dev