Cookie & Tracking Disclosure

1. What Are Cookies?

A "cookie" is a small text file that a website stores on your device to remember information about you between visits. Related technologies include local storage, session storage, web beacons, and server-side logging. We refer to all of these collectively as "Tracking Technologies" in this disclosure.

2. Categories of Tracking We Use

Strictly necessary

These are required for the Service to function and cannot be disabled through our interface. Examples:

• Authentication cookies set by our auth provider Clerk to keep you signed in and to protect your session from unauthorized use.
• Session tokens exchanged with our backend (Convex) to authorize API calls.
• Anti-CSRF / security tokens required to prevent common web attacks.

Functional

• Theme preference stored in local storage so the dark or light theme persists across visits.
• Form draft state stored in local storage so the onboarding wizard can resume where you left off.

Performance / analytics

We do not currently load third-party analytics, advertising, or retargeting cookies. If we add an analytics provider in the future (for example, a privacy-respecting aggregate analytics service), we will update this page.

Server-side logging (not browser cookies)

• Crawler-visit log. We record requests from identifiable AI and search crawler user-agents (e.g., GPTBot, ClaudeBot, PerplexityBot, Googlebot, Bingbot) along with the requested path. This log is used internally to understand which engines are indexing the directory and is not associated with individual human visitors.
• Server access logs. Our hosting provider Netlify maintains standard server logs (IP address, timestamp, requested URL, response code) for security and operations.

3. Third-Party Cookies

Cookies may be set in your browser by the following third parties when you use authenticated features of the Service:

• Clerk (authentication) — sets cookies on its domain(s) to manage sign-in state and security.
• Convex (backend) — exchanges session tokens that may be stored as cookies or in local storage.

We do not currently use third-party advertising or social-media tracking pixels.

4. How to Manage Cookies

Most browsers let you view, manage, and delete cookies through their settings. You can also configure your browser to block third-party cookies, alert you when cookies are set, or clear them when you close the browser. Disabling strictly necessary cookies will prevent you from signing in or using authenticated features of the Service.

Useful links: Chrome, Firefox, Safari, Edge.

5. Do Not Track and Global Privacy Control

Because there is no widely accepted standard for handling "Do Not Track" browser signals, we do not currently respond to them. Where required by applicable law, we honor the Global Privacy Control (GPC) signal as an opt-out of selling or sharing personal information — which we do not currently do.

6. Changes

We may update this disclosure as our use of Tracking Technologies changes. Material changes will be reflected in the effective date and communicated in line with our Privacy Policy.