Cookie Policy
GradePath uses cookies, local storage, and similar browser technologies for account access, security, and preferences. With browser permission, GradePath can also use PostHog for product analytics, performance monitoring, and heatmaps. Session replay is disabled. Native iOS storage and analytics do not necessarily use browser cookies.
Nonessential PostHog analytics and heatmaps are off unless you select Allow analytics. Session replay remains disabled regardless of that choice. The choice is stored locally in your browser. You can reopen it through Privacy choices in the website footer. Core features work without analytics.
1. Technologies currently used
| Category | Purpose and provider | Typical data |
|---|---|---|
| Account and security | Supabase and GradePath use browser storage and authentication cookies to keep a signed-in session, protect requests, and route account access. | Session tokens, account identifier, expiration, security state, and request metadata. |
| Product analytics | After you select Allow analytics, PostHog measures page views, selected feature interactions, performance, and campaign attribution. | Distinct identifier, page and referrer, device and browser, IP-derived network data, timestamps, and selected interaction properties. |
| Heatmaps | After you select Allow analytics, PostHog can generate aggregate heatmaps to diagnose usability and reliability issues. Session replay is disabled. | Click position, route, viewport, device and browser characteristics, and timestamps. |
| Error and performance monitoring | Sentry and GradePath diagnose crashes, errors, and slow requests. This function may use identifiers or browser storage depending on the failure and configuration. | Error details, stack traces, route, app and browser version, timestamps, and redacted request metadata. |
| Direct web billing | Stripe can set cookies or similar identifiers on direct web checkout and billing pages for payment, fraud prevention, and security. | Checkout session, device and network signals, billing interaction, and fraud-prevention data. |
| Preferences | GradePath can store interface and navigation choices so the website behaves consistently. | Non-sensitive display or preference values. |
2. No targeted advertising
GradePath does not use cookies for targeted advertising, does not operate a third-party ad network on the service, and does not sell browser activity for cross-site advertising. Permission for PostHog analytics does not authorize advertising measurement. GradePath does not currently use Meta Pixel or Conversions API.
3. Your browser controls
Use Privacy choices in the website footer to allow or decline PostHog analytics. You can also delete existing cookies, block future cookies, restrict cross-site tracking, or clear site storage through your browser. Blocking account or security storage can prevent sign-in and other authenticated features from working. Declining analytics does not prevent core features from working, but it can reduce our ability to diagnose problems.
Browsers do not implement "Do Not Track" signals consistently. GradePath does not currently represent that it responds to every optional browser signal, including Global Privacy Control. You can use Privacy choices to decline nonessential website analytics.
4. Retention and provider terms
Cookie and browser-storage duration varies by function. A session item may expire at sign-out or its configured expiration; analytics and security records can remain longer according to the provider and GradePath configuration. Declining later stops future PostHog collection in that browser but does not automatically delete records collected while permission was active. See the Privacy Policy and Subprocessors page. You can clear local browser storage at any time, but doing so does not delete server-side records or your account.
5. Changes and contact
We may update this Cookie Policy when providers, cookies, or controls change. The date at the top identifies the current version. Questions about website tracking can be sent to [email protected].