Cookies and device storage
How the application uses your browser and installed-app storage.
1 Necessary cookies
Sign-in cookies maintain your session, and a security cookie helps protect authenticated actions against cross-site request forgery. They support the service rather than advertising. Blocking necessary cookies can prevent sign-in and normal use.
2 Your optional analytics choice
Optional product analytics is off until you choose to allow it on this device. You can select Necessary only without losing sign-in or normal work, or use Cookie preferences in your account menu or on this page to change your choice. The preference cookie lasts up to 180 days; an expired or invalid choice requires a new decision.
When allowed, PostHog receives bounded feature-use and page-timing events with a pseudonymous identifier. This integration does not capture session replay, form contents, full page URLs or advertising profiles. Withdrawing permission stops future optional events; it does not erase events already received. Necessary security, support incident reporting and business audit records continue separately.
3 Preferences and draft work
The browser can retain theme, navigation and notification preferences, along with locally saved work such as drafts. These records are stored on that device; a saved browser draft is not proof that the server received it. Use a private browser profile on shared devices and clear local site data when handing a device to another person. Clearing site data can remove unsynchronised work.
4 Installed app and alerts
The installed app uses a service worker and browser storage for its app resources. Phone alerts require browser or device permission and a push subscription. Device settings control tones, display and muting. App installation does not mean that every workflow works offline.
5 External content and optional services
Selected GIFs and external media can load from their original provider, which can receive the requesting device’s network information. Google sign-in, Drive, AI and other enabled services have their own policies. Consult the Sub-processors page for services configured for this deployment. Optional analytics must be disclosed and assessed before it is enabled; this notice does not authorise advertising or session-content capture.