Cookie Policy
What are cookies?
Cookies are small text files stored on your device when you visit a website. They allow the site to remember information about your visit.
Strictly necessary cookies
These cookies are essential for the site to function. They manage your authenticated session and protect against cross-site request forgery. They are set by Regulatory Signals directly and cannot be declined while using account features.
| Name | Category | Purpose | Lifespan | Provider |
|---|---|---|---|---|
| __Secure-next-auth.session-token | Strictly Necessary | Stores your authenticated session token. Required to keep you signed in between pages. | Session / 30 days | Regulatory Signals |
| __Host-authjs.csrf-token | Strictly Necessary | CSRF protection token. Prevents cross-site request forgery on sign-in and sign-out actions. | Session | Regulatory Signals |
| __Secure-authjs.callback-url | Strictly Necessary | Stores the URL to redirect you to after sign-in completes. | Session | Regulatory Signals |
Analytics cookies
We use Google Analytics (loaded directly via googletagmanager.com/gtag/js, measurement ID G-965Y9SXMFQ) to understand how visitors interact with our site. These cookies are set only after you accept our cookie notice. Google Consent Mode v2 is enabled — analytics storage is denied by default and granted only on explicit acceptance.
We also use PostHog EU Cloud (eu.i.posthog.com) for product analytics (page views, feature usage, sign-up funnel). PostHog is configured with opt_out_capturing_by_default: true and persistence: "memory" — it sets no cookies and does not persist data between sessions until you accept. Cloudflare Web Analytics (static.cloudflareinsights.com) also collects anonymised page-view data via a beacon script. It does not set persistent cookies and does not fingerprint individual users.
| Name | Category | Purpose | Lifespan | Provider |
|---|---|---|---|---|
| _ga | Analytics | Distinguishes unique users by assigning a randomly generated number as a client identifier. | 2 years | Google Analytics |
| _gid | Analytics | Stores and updates a unique value for each page visited. | 24 hours | Google Analytics |
| _gat | Analytics | Used to throttle the request rate to Google Analytics. | 1 minute | Google Analytics |
We do not use advertising cookies, tracking pixels, or share data with third parties for marketing purposes.
Your choices
When you first visit our site, you will be shown a cookie notice. You can accept or decline analytics cookies at that point. If you decline, no analytics cookies will be set.
You can also opt out of Google Analytics across all websites using Google's opt-out browser add-on. PostHog captures no data until you accept, and stores nothing between sessions (it uses in-memory state only). Once you accept, you can withdraw consent by clearing local storage or declining on your next visit.
To withdraw consent you have previously given, clear your browser's local storage for this site — the cookie notice will reappear on your next visit.
Changes to this policy
We will update this page if we add or remove cookies. Material changes will be reflected in the effective date above.
Contact
Questions about this policy? Email us at [email protected] or see our Privacy Policy.