Effective date: October 11, 2026
Change this whenever you like. It takes effect on this device and is shared between our website and app. When signed in, your latest choice also controls account analytics.
No choice recorded yet.
Cookies are small text files stored on your device when you visit a website. We also use similar technologies such as local storage and session storage.
| Cookie | Purpose | Duration | Required |
|---|---|---|---|
| sb-* | Supabase authentication session | 8 hours, or 30 days with “Keep me signed in” | Yes |
| ep-last-active | Idle-timeout tracking | 1 day, or 31 days with “Keep me signed in” | Yes |
| ep-session-start | Absolute session limit enforcement | 1 day, or 31 days with “Keep me signed in” | Yes |
| ep-remember-me | Whether “Keep me signed in” was selected (30-day session) | 1 day, or 31 days if selected | Yes |
| ep-browser-session | Signs you out when the browser closes unless “Keep me signed in” was selected | Until the browser closes | Yes |
| ep-mfa-verified | Recent MFA challenge timestamp (security gate) | 5 minutes | Yes |
| ep-consent | Records your cookie consent choice | 1 year | Yes |
| ph_* | Product analytics (PostHog). Page views and feature usage, used to find where the product is confusing. Set only if you choose “Essential + analytics”. | 1 year | No |
We do not place advertising or cross-site tracking cookies. We do not use Google Analytics, Meta Pixel, or similar advertising trackers, and we do not sell or share your information with advertising networks.
We do use one product-analytics provider, PostHog, to understand how the Platform is used. It runs only if you choose “Essential + analytics”. Decline and the analytics code does not start. Withdrawing consent stops further collection, including optional server events for your signed-in account. You can change this at any time using the control at the top of this page. We do not record sessions or send form contents, identity documents, contact details or payment amounts to PostHog. Page URLs exclude query strings and private deal identifiers.
Cookies marked “Required: Yes” keep you signed in and secure your session; the Platform cannot work without them. Anything marked “No” is optional and is controlled by the choice at the top of this page. You can withdraw that consent as easily as you gave it, at any time, and we record each change. The latest signed-in choice controls optional account events. Essential transaction, identity-verification and security records remain in the app regardless of your analytics choice. Withdrawing consent stops future collection; it does not automatically delete analytics already collected.
You can also clear all cookies through your browser settings, but this will sign you out and reset your preferences.
We may update this policy when we change our cookie practices. Material changes will be noted on this page with a new effective date.
See our Privacy Policy for full details on how we handle your personal information.