Cookie Policy

Cookies are small files a website saves in your browser. Websites can also save information in your browser's local storage and session storage, which work in a similar way. This policy covers all three, and it's part of our Privacy Policy.

These keep DealPrep working and secure, so they can't be switched off. They aren't used for analytics or advertising.

• Login session (names starting with "sb-", set by our login provider, Supabase): keeps you logged in. It lasts until you log out, for up to 400 days.
• dp_consent: remembers whether you accepted or rejected analytics, so we don't ask on every page. It lasts 6 months, then we ask again.
• dp_pending_email: after you sign up, remembers which address we sent your confirmation link to, so we can show it and send it again. It lasts 1 hour.
• dp_pending_invite: if you open an organization invite and then sign up or log in, it brings you back to that invite. It lasts 24 hours.
• dp_terms_agreed: while you sign up with Google, remembers that you ticked the box agreeing to our Terms and Privacy Policy. It lasts 10 minutes.

These stay in your browser and aren't sent to us:

• theme (local storage): light or dark mode.
• dealprep:voice-answer-mode (local storage): how the voice answer tool listens, if you use it.
• dp_reloaded_for_update (session storage): stops a page from reloading over and over when we release an update. It's cleared when you close the tab.

Nothing in this section is used until you choose "Accept analytics". If you reject, or don't choose, none of it is saved.

• PostHog (product analytics): a cookie and a local storage item named "ph_" followed by our project key. They hold a random ID that tells visits apart, so we can see which pages are used and where people get stuck. The cookie lasts 1 year. PostHog may also record session replays: how you move through a page, with all text, everything you type and all images hidden.
• Sentry (error replays): when something breaks, a short recording of the moments before the error, with all text, typing and images hidden. Sentry keeps an item named "sentryReplaySession" in session storage, which is cleared when you close the tab.

Error reports themselves (what went wrong, your browser and the page) are sent to Sentry whether or not you accept analytics, because we need them to keep DealPrep working. They don't use cookies or browser storage.

When you pay for DealPrep Pro, you go to Stripe's checkout page, and when you sign in with Google, you go to Google's sign-in page. Those pages are run by Stripe and Google, which use their own cookies under their own policies. We don't embed videos, social media buttons, ads or other third-party content on DealPrep.

• Change your analytics choice at any time with Cookie settings at the bottom of the page. If you switch analytics off, we delete the analytics cookies and storage from your browser.
• If your browser sends a Global Privacy Control (GPC) signal, we treat it as a no to analytics and don't show the banner. This also overrides an earlier "Accept analytics" for as long as the signal is on.
• You can also block or delete cookies in your browser's settings. If you block the cookies DealPrep needs, you won't be able to log in.
• Saying no to analytics doesn't change anything else: every feature works the same.

If we start using a new cookie, we'll add it here and change the date at the top. If it needs your consent, we'll ask you before using it.

Questions about cookies? Email [CONTACT EMAIL].