Cookie policy

Producticity uses a small number of cookies. Under the Privacy and Electronic Communications Regulations (PECR) we may set cookies that are strictly necessary without asking; anything else needs your consent first. When you first visit, a banner asks whether you allow analytics and marketing cookies. "Accept all" and "Reject all" are equally easy, and nothing optional is set until you choose. You can change your choice at any time with "Cookie settings" at the bottom of every page, or, when signed in, under Account > Privacy.

Strictly necessary cookies

• consent: Remembers your cookie choices (analytics / marketing, and when you chose). If you are signed in, your choices are also stored with your account. Expires: 12 months.
• better-auth.session_token (or __Secure-better-auth.session_token): Keeps you signed in. Expires: When your session ends or after [CONFIRM 7 days].
• Other better-auth.*: Short-lived values that protect sign-in flows (for example, OAuth state with Google or Apple). Expires: [CONFIRM minutes].

Stripe sets cookies on payment pages to prevent fraud. See Stripe's cookie policy. [CONFIRM: list any bot-protection (e.g. Cloudflare Turnstile) cookies if enabled.]

Preferences

• theme (local storage, not a cookie): remembers light or dark mode.

Analytics cookies (only with your consent)

We use PostHog ([CONFIRM: EU cloud, hosted in the EU]) to understand how the site is used: which pages are viewed and which links and buttons are clicked. We do not record sessions, we do not store your IP address with events, and if you are signed in we identify you only by an internal account id, never by your name or email.

• ph_<project key>_posthog (cookie and local storage): A random id that groups your page views and clicks. Expires: [CONFIRM 1 year].

[CONFIRM: keep this paragraph and its cookies only if NEXT_PUBLIC_GA_MEASUREMENT_ID is set; otherwise delete them.] With your consent we also use Google Analytics 4, provided by Google Ireland Limited, to understand how the site is used. We send the page path with any personal identifiers removed, campaign tags, and events such as sign-ups and purchases (order reference, value and currency), never your name, email address or phone number. Google signals and ad personalisation are off.

• _ga (cookie): Google Analytics, distinguishes visitors. Expires: [CONFIRM 2 years].
• _ga_<container id> (cookie): Google Analytics, keeps session state. Expires: [CONFIRM 2 years].

If you withdraw consent, analytics stops immediately, no further data is sent and we delete the Google Analytics cookies on this site.

Marketing cookies (only with your consent)

[CONFIRM: we currently set no marketing cookies. The banner asks in advance so that adding one later doesn't need a new prompt; list each one here (name, provider, purpose, expiry) before you add it.]

Managing cookies

You can block or delete cookies in your browser settings, but you will not be able to sign in without the session cookie.

Questions: privacy@producticity.app