Cookie Policy
Cookies are small text files stored on your device. Under the Privacy and Electronic Communications Regulations (PECR), we only need your consent for cookies that are not strictly necessary for the service to function.
Strictly necessary (no consent required)
| Cookie | Purpose | Duration |
|---|---|---|
| Clerk session cookie | Keeps you signed in and secures your session | Session / short-lived |
| OAuth state / nonce | Prevents cross-site request forgery during Google account connection | Short-lived (single use) |
acrow-cookie-consent | Remembers your cookie choice, so we don't ask again on every visit | 1 year |
Analytics (consent required)
The banner asks for consent to two categories: analytics (understanding how the product is used) and marketing (advertising/remarketing). If you accept, we load PostHog (EU Cloud) and Google Tag Manager (container GTM-58RDM3X4) on our staging and live app hosts. PostHog powers product analytics and session replay. GTM is a tag loader: tags configured inside that container (for example Google Analytics 4 or ads pixels) may set further cookies after you opt in. Neither loads on localhost, and neither loads until you opt in.
| Cookie / storage | Purpose | Duration |
|---|---|---|
ph_* cookies and local storage | PostHog distinct id, session, and feature-flag bootstrap so pageviews, clicks and signed-in identity stay consistent | Up to 1 year |
| PostHog session replay | Records your use of the product (clicks, navigation, on-screen content) so we can see where testers get stuck. Form inputs are masked. This is a recording of our app, not of your clients' sites. | Session; stored by PostHog in the EU |
| Google Tag Manager | Loads measurement and marketing tags we configure in the GTM container. The container itself is a script loader; individual tags decide which cookies they set. | Session / as set by each tag |
_ga, _gid, _gcl_* (typical) | Common Google Analytics / Ads cookies that may appear once a GA4 or Ads tag inside GTM fires after you opt in. Exact set depends on which tags are published in the container. | Up to 2 years (vendor-dependent) |
Rejecting non-essential cookies, or changing your choice below, stops PostHog and tells Google Consent Mode to deny analytics and ad storage so GTM tags stop setting new cookies. If PostHog had already started, capture is opted out and the PostHog identity is reset.
Your choice is shared between auditcrow.com and app.auditcrow.com — both are operated by us, so choosing once covers both and you won't be asked again on the other.
Response-rate statistics
When you choose Accept or Reject, we record that choice as an anonymous count (which option was picked, and roughly when) so we can see our overall acceptance rate. This record carries no cookie, no IP address and no identifier that could be linked back to you or your visit.
Change your choice
You can accept or reject non-essential cookies at any time, not just on your first visit.
Managing cookies
You can also block or delete cookies using your browser settings. Blocking strictly-necessary cookies (like the Clerk session cookie) will prevent you from signing in.
Contact
Questions about this policy: privacy@4dservices.co.uk