LegalUpdated Oct 14, 2026
Cookie Policy
What we use
Cookies and similar technologies (local storage, pixels) let the site function, remember your preferences, and (only with your consent) measure usage. Some are set by us (first-party); analytics tools may set their own. We do not use advertising or cross-site tracking cookies.
Categories & legal basis
| Category | Purpose | Legal basis | Consent |
|---|---|---|---|
| Strictly necessary | Core site function, security, session state, and the pre-launch access gate. | Required (no consent needed). | Always on |
| Preferences | Remembering choices such as theme and your consent decision itself. | Legitimate interests / necessary. | As applicable |
| Analytics | PostHog and Google Analytics 4 usage measurement. | Consent (EU/UK ePrivacy); opt-out (US). | Consent-gated |
Specific cookies & storage
| Name | Set by | Purpose | Category | Retention |
|---|---|---|---|---|
| optimized-consent-v1 (local storage, not a cookie) | First-party | Stores your accept/decline analytics choice. | Preferences | No set expiry: kept until you clear site data or choose “Manage cookies”, which deletes it. |
| optimized-access (HttpOnly, Secure, SameSite=Lax) | First-party | Remembers pre-launch access-gate entry. Holds a hashed token, never the password. | Strictly necessary | 30 days |
| optimized-public (SameSite=Lax) | First-party | Marks a visit to a public legal page without gate access, so the site menu stays hidden. | Strictly necessary | Session (deleted once you pass the gate) |
| sb-*-auth-token (SameSite=Lax) | First-party (Supabase) | Keeps you signed in to the affiliate portal. Set only when you sign in there. | Strictly necessary | Up to 400 days, or until you sign out |
| optimized_ref | First-party | Remembers the creator code from a referral link you followed, so an app install can credit that creator. | Preferences | 30 days |
| optimized_ref (local storage, not a cookie) | First-party | Backup copy of the referral code above, in case the cookie is cleared. | Preferences | No set expiry: kept until you clear site data. |
| ph_* / PostHog | First-party (PostHog) | Distinguishes sessions for product analytics. | Analytics | Up to 12 months |
| _ga / _ga_* | First-party (GA4) | Distinguishes users for aggregate traffic stats. | Analytics | Up to 2 years |
Referral links
If you arrive through a creator referral link (optimizedtracker.com/r/YOURCODE), the optimized_ref cookie stores that creator’s short code and a timestamp for 30 days, and we mirror the same value into your browser’s local storage as a backup copy. This exists so the creator can be credited if you install the app. It identifies the creator, not you: it contains no account identifier and records nothing about your browsing. Alongside it we count the click itself as an anonymous statistic (time, coarse country, device platform class, and funnel stage). We store no IP address, no user agent, and no device fingerprint with that count. See the Privacy Policy for details.
The tools we use
- PostHog: product analytics; loaded only after you accept analytics.
- Google Analytics 4: aggregate traffic measurement; loaded only after you accept analytics.
Managing your consent
When you first visit, our cookie banner lets you accept or decline analytics. You can change or withdraw your choice at any time via the “Manage cookies” control in the site footer; withdrawing consent stops further analytics collection. Declining keeps all core functionality intact.
Regional notes
- EU/EEA & UK: under the ePrivacy Directive and GDPR, non-essential cookies load only after your prior, informed, opt-in consent.
- United States: applicable state laws operate on an opt-out basis; we do not sell or share data, and you may still decline analytics.
Do Not Track
Because there is no industry-standard response to browser “Do Not Track” signals, we honour your explicit choice in our consent banner as the controlling preference, and we treat recognised opt-out preference signals as such where required by law.
Questions
For more on how we handle data, see our Privacy Policy, or contact support@optimizedtracker.com.