What we store, and what you choose.

Authentication storage keeps a signed-in session and refreshes it securely. Security and return-path values prevent forged requests and return a person to the Octoclip page they intentionally opened. A preview cookie lets a visitor who drafted a job idea before signing up claim it afterwards, and your analytics choice is saved in your browser's local storage so we do not ask again. These are necessary for the service requested and cannot be switched off inside Octoclip. Their legal basis is that storage strictly necessary for a service you request does not need consent.

On payment and payout pages, Stripe loads its own scripts, which set cookies such as __stripe_mid and __stripe_sid to prevent fraud and secure the payment. They are necessary for the payment you request. Stripe is responsible for them under its own privacy and cookie policy.

Vercel Web Analytics, from our hosting provider, counts page visits for every visitor without cookies or browser storage. It records the page address, the referring site, and the country, browser and device type, and does not identify you or follow you across sites or days. Codes and private links are removed from page addresses before they are sent. Because nothing is stored on your device, it needs no consent; its legal basis is our legitimate interest in knowing how many people use Octoclip.

Google Analytics (Google tag / gtag.js) measures visits, page views, and similar usage on Octoclip. Google may set first-party analytics cookies such as _ga only after you accept analytics in the consent banner. Until then, analytics storage stays off. Decline keeps measurement cookies off; clearing this site's data in your browser lets the banner ask again. Analytics cookies last up to two years, and the data is kept for at most 14 months. Google may process it in the United States; see the privacy policy for the safeguards. The legal basis is your consent, which you can withdraw at any time with effect for the future by clearing this site's data and declining when the banner asks again.

PostHog measures page views, clicks on buttons and links, and errors in the browser. Nothing of it loads until you accept analytics in the same banner; only then does it set its first-party cookie (named ph_ followed by our project key) and browser storage, for up to a year. You are not identified by name or email, your screen is not recorded, the text on the page and what you type are not collected, and codes and other parameters are removed from page addresses before they are sent. Decline keeps it off. The legal basis and how to withdraw consent are the same as for Google Analytics.

You can remove or block storage in browser settings, but sign-in and protected pages may stop working if essential storage is blocked.

Questions about cookies go to support@octoclip.io.