Cookie Policy

Cookies are small text files placed on your device by a website. We also use localStorage, sessionStorage, and pixel tags — this Policy refers to all of them collectively as "cookies".

A cookie is first-party when it is set by the domain you are visiting and third-party when it is set by another domain. A cookie is a session cookie if it expires when you close your browser and a persistent cookie if it remains until its expiration date.

We use cookies for four purposes:

• Strictly necessary: authentication, session management, CSRF protection, load balancing, and storing your cookie choices. Always on.
• Functional: remembering your preferences (theme, language, time zone, dashboard layout).
• Analytics: understanding how the Service is used so we can improve it. Opt-in in the EEA and UK.
• Marketing: measuring the performance of our marketing campaigns. Opt-in.

We do not use advertising cookies or third-party retargeting on the in-app experience.

The exact list may change as we add or remove tools. The most up-to-date list is shown in the cookie banner.

Some of our third-party providers may set their own cookies when their scripts run on our site:

• Google Analytics 4 — usage analytics.
• Stripe — payment fraud prevention.
• Sentry — error monitoring (may use localStorage).

We require all subprocessors to use cookies only for the purposes we specify.

• Cookie banner. When you first visit, we show a banner where you can accept all, reject all (except strictly necessary), or choose categories.
• In-app settings. You can change your choices at any time from Settings → Privacy.
• Browser controls. Most browsers let you block or delete cookies. Blocking strictly necessary cookies may break login.
• Global Privacy Control (GPC). We honour the GPC signal — see Do Not Sell or Share My Personal Information.

There is no agreed industry standard for Do Not Track signals. We respect your cookie choices made in our banner and the GPC signal.

Questions? Email support@postbolt.org.