Legal
Cookie Policy
Summary
Three categories, with separate choices for the optional ones:
- Strictly necessary — sign-in and payment. Set for everyone; the service does not work without them, and the ePrivacy Directive does not require consent for them.
- Analytics — PostHog, in the EU. Set only after you accept the banner. Decline it, or ignore it, and PostHog is never started: no request leaves your browser and no cookie is written.
Advertising measurement is optional and separate from analytics. With your permission, Google Ads records ad interactions and completed purchases, including the amount, currency and an opaque transaction identifier. We do not use enhanced conversions or create personalised-ad audiences.
Cookies we use
Strictly necessary · Clerk
Session and CSRF cookies that keep you signed in and let us reject forged requests. The service cannot function without them, so the consent banner does not apply — this is what the ePrivacy Directive calls strictly necessary.
Strictly necessary · Stripe
Fraud-prevention cookies set by Stripe during checkout. Strictly necessary to take a payment.
Analytics — only if you accept · PostHog
Identifies a returning browser so page views are not counted twice, and carries the session-replay session id. Written only after you accept the banner — decline, or ignore it, and PostHog is never started, so no request is made and no cookie is written. PostHog stores the same record in localStorage under the same name.
Advertising measurement — only if you allow it · Google Ads
Stores ad-interaction information to attribute a purchase. Loaded only after a separate advertising-measurement choice; declining analytics does not grant this permission. Google may also use _gcl_* localStorage entries. We keep opaque conversion receipts in tc-ads-purchases-v1 to reduce duplicate sends.
Manage cookies lets you allow either optional category, both, or neither. Withdrawing analytics stops PostHog and clears its cookie. Withdrawing advertising measurement updates Google’s consent state, clears our ad cookies and conversion receipts, and reloads the page so the tag stops running. Declining before a first grant loads no Google tag and sends no Google measurement requests.
What we don’t use
- No Meta Pixel, X pixel or LinkedIn Insight Tag. Google Ads is used only for the separately consented advertising measurement described above.
- No profiling for personalised advertising.
- No sale of cookie-derived data to data brokers.
- No cross-context behavioural advertising (CCPA/CPRA terminology).
- No cookies from any processor other than the ones named above — see the full list on the privacy policy.
Managing your choice
The banner appears on your first visit. Your choice is stored on your own device for up to 12 months; after that we ask again, in line with EDPB guidance on periodic re-confirmation.
To change your mind at any time: — this reopens the banner with your current choice pre-filled. Withdrawing is one click, exactly like granting.
You can also clear cookies from your browser settings. Clearing the strictly necessary ones will sign you out and may interrupt a payment in progress; you can sign back in or start the checkout again afterwards.
Consent records
PostHog consent is stored in tc-consent-v3. Advertising permission is stored separately in tc-ads-consent-v1, with a timestamp and a 12-month expiry. An earlier analytics choice never grants permission for Google Ads. You can change either choice using Manage cookies.
The one thing we do record either way is the answer itself. Pressing Accept or Decline sends us a count — which button, which page, and whether the screen was phone-sized — so we can tell how much of the picture we are missing. It sets nothing on your device, reads nothing from it, and carries no identifier: it is filed under a random number made for that single request and thrown away afterwards, so two answers from the same person cannot be connected.
Contact
Questions about cookies? Email support.transcribecat@