Cookie Policy
Placeholder — the prose of this policy still needs writing and reviewing. The inventory below, however, is real: it lists what the site actually loads, and should be kept in step with the code whenever a tag is added or removed.
This page renders from content/legal/cookies.md.
Essential
Set no matter what you choose, because the site cannot work without them.
| What | Purpose |
|---|---|
| Supabase session cookies | Keeps you signed in and protects your account. |
cookie-consent (local storage) |
Remembers your answer to the banner, so you are not asked on every visit. |
Non-essential
Nothing here stores anything on your device until you press Accept, and if you press Reject none of it loads at all.
| What | Provider | Purpose | Before you answer |
|---|---|---|---|
Google Ads tag (gtag.js) |
Measures which adverts led to a sign-up or a subscription. | Loads, but in a denied state — see below. | |
| Vercel Web Analytics | Vercel Inc. | Counts page views so we know which pages are used. Cookieless: it stores nothing on your device and does not identify you. | Loads. |
| PostHog | PostHog, Inc. | Product analytics — which pages and steps people use, so we can see where the sign-up journey breaks down. | Not loaded. |
| Meta Pixel | Meta Platforms | The same advert measurement, for Facebook and Instagram. | Not loaded. |
The Google tag before you answer
The Google tag runs under Google Consent Mode v2. Until you accept, all four of its consent signals — advertising storage, advertising user data, advertising personalisation, and analytics storage — are set to denied. In that state the tag sets no cookies and stores no identifier on your device. It sends Google an anonymous, cookieless signal that a page was viewed, which Google uses to estimate advertising performance in aggregate.
If you press Accept, the signals are upgraded to granted and the tag begins using cookies. If you press Reject, the tag is never loaded again on any page, and if it had already loaded it is returned to denied immediately.
We do not use enhanced conversions: your email address is never sent to Google, hashed or otherwise.
What the advertising tags are told
Only that an account was created, and that a subscription was bought — with the plan's price and a Stripe reference number so the same purchase is not counted twice. They are not told your name, your email address, your date of birth, or anything about your results.
Changing your mind
Clear this site's data in your browser (or the cookie-consent entry in local
storage) and the banner will ask again on your next visit.