Cookie Policy

1. What Are Cookies

Cookies are small text files stored on your device when you visit a website. They help us remember your preferences and understand how you use our service.

2. Essential Cookies

Essential storage is necessary for authentication, security, and core service operation and cannot be disabled. Your versioned analytics choice is stored under raccoonpage_cookie_consent in local storage and in a Secure, SameSite=Lax cookie scoped to .raccoon.page so the public marketing site and product application apply the same preference. The preference stores category choices and an update time, not marketing or product activity.

3. Analytics Cookies

Analytics is denied by default. After explicit consent:

• Google Analytics runs only on the public marketing site and may set first-party _ga and _ga_<container> cookies to distinguish pseudonymous visitors and sessions and measure landing pages, traffic sources, and signup CTA interactions. Google Analytics is not loaded in the product application.
• PostHog runs only in the product application and may use local storage and cookies for pseudonymous product analytics. PostHog session replay starts only with analytics consent, and all rendered text and input values are masked. Server-side PostHog events also require the latest persisted analytics consent.

4. Marketing Cookies

We do not currently load an advertising or cross-site behavioral targeting provider. The separate marketing preference records whether optional marketing storage may be used in the future; enabling it does not subscribe you to communications, and communication consent remains a separate registration/account choice.

5. Managing Cookies

You can manage your preference from Cookie settings on the public site or in the product Privacy Center. Revoking consent stops future analytics collection, opts the browser out of PostHog, stops replay, and returns PostHog to memory-only persistence. Revocation on the public site clears anonymous first-touch storage immediately. Revocation in the product updates the shared preference, and the public site clears its origin-isolated first-touch storage the next time it loads. Consented first-touch acquisition attribution joined to an account remains until account deletion, as described in the Privacy Policy. Browser controls can also clear existing cookies and local storage.

6. Jurisdiction-Specific Rights

EU/UK users: Cookies require opt-in consent under GDPR/PECR. US users: You may opt out of sale/sharing under CCPA/CPRA. Other jurisdictions: We apply the strictest applicable standard.