Cookie Policy

Last updated: 21 May 2026

1. What is a cookie

A cookie is a small text file a website stores in your browser. Some cookies are necessary for the site to work; others let us measure how the site is used. Browser storage (localStorage) is treated the same way under GDPR / ePrivacy / PECR.

2. Categories we use

• Strictly necessary — sign-in session token, CSRF token, language preference. Always on; no consent required because the site cannot function without them.
• Analytics — PostHog (product analytics), Google Analytics 4 (web analytics), Microsoft Clarity (sampled session replay). Off by default; loaded only after you accept the analytics category in the cookie banner.
• Marketing — Reserved for future retargeting / ad pixels. None currently active. Off by default.

3. Changing your mind

Click "Cookie settings" in the footer of any page to re-open the consent banner and change your category selections. Your choice is stored locally in your browser; clearing browser data resets it.

California residents: the footer also exposes a "Do Not Sell or Share My Personal Information" link which rejects all non-essential categories in one click, per CCPA / CPRA.

4. Third-party cookies + retention

When you accept analytics, the third-party services below set their own cookies under their own retention policies. Retention windows shown here are the defaults at our current configuration; consult each provider's policy for authoritative detail.

• PostHog — first-party cookie identifying the browser; event data retained per our PostHog Cloud configuration (default 7 years for paying tiers, less on free). Provider policy.
• Google Analytics 4 — `_ga*` cookies; event data retained up to 14 months by GA4 default. Provider policy.
• Microsoft Clarity — `_clck`, `_clsk` cookies; session replay data retained per Clarity defaults (typically 13 months). Provider policy.

The full sub-processor list (including DPA links) lives at our Sub-processors register.

5. Questions

Email [email protected].