1. What are cookies?

Cookies are small text files stored on your device when you visit a website. We also use similar technologies (e.g. local storage, session tokens) for authentication and preferences.

2. Cookies we use

2.1 Essential (strictly necessary)

Supabase authentication cookies — keep you signed in securely
Session / CSRF protection — help prevent unauthorized requests
Stripe — may set cookies during checkout on Stripe-hosted pages

These are required for login, billing, and core security. Disabling them may prevent you from using the Service.

2.2 Functional

Theme or UI preferences (e.g. light/dark mode) where stored locally
Chrome extension sync storage for extension sign-in state

2.3 Browser analytics (optional)

When you click "Accept All" in our cookie banner:

PostHog browser analytics — product events and feature usage
Google Analytics (GA4) — aggregated website traffic and usage metrics

Choosing "Essential Only" prevents those optional browser analytics tools from loading. We may still process limited server-side service events for security, billing, reliability, error diagnosis, and operation of core features. Those server events are not optional browser cookies and are not controlled by the cookie choice.

Vercel Analytics / Speed Insights may process aggregated site-performance measurements on visits. We do not use those measurements for advertising.

2.4 Advertising cookies

When you click "Accept All" in our cookie banner, we load Google AdSense to display ads that help support free educational content. AdSense may set cookies for ad delivery and measurement. We do not use Facebook Pixel, Google Ads remarketing, or similar ad-tracking beyond AdSense.

Visitors in U.S. states supported by Google's privacy tools may also receive a "Do Not Sell or Share My Personal Information" choice for AdSense personalization. Where supported, Google may apply restricted data processing after an opt-out or recognized Global Privacy Control signal.

3. Third-party cookies

Third parties (Supabase, Stripe, Google sign-in, analytics providers) may set their own cookies when you use those features. Their policies govern those cookies.

4. How to manage cookies

Privacy choices: Use the "Privacy choices" link in the site footer, your profile menu on the dashboard, or the shield button on public pages to switch between Accept All and Essential Only
Browser settings: Chrome, Safari, Firefox, and Edge let you block or delete cookies
Sign out: Clears session cookies for your account
Privacy requests: Contact privacy@trackmyopt.com

Switching to Essential Only prevents optional browser tools from loading on the next page load. Cookies already stored on your device may remain until they expire or you remove them in your browser. Blocking essential cookies will break login and dashboard access.

5. Browser privacy signals

Some browsers send "Do Not Track" signals. We do not currently respond differently to DNT signals because there is no industry standard; we limit tracking to the categories above.

Global Privacy Control is a separate browser signal. Google states that it applies restricted data processing to applicable AdSense requests when it receives a recognized GPC opt-out signal in supported U.S. states.

6. Updates

We may update this Cookie Policy. See the version date at the top of this page.

More detail: Privacy Policy · Contact: privacy@trackmyopt.com