Cookie Policy

1. What a cookie is

A cookie is a small text file a website asks your browser to keep, so the site can recognise your browser the next time. Similar technologies such as local storage work the same way for the purposes of this policy, and we call all of them “cookies” here for simplicity.

2. Your choice comes first

Anything that is not strictly necessary to run the Sites is off until you say yes. The first time you visit, a banner asks you to accept or reject non-essential cookies, and both buttons carry the same weight. Until you choose, no analytics or referral script loads. This is the same wherever you are; we do not switch trackers on by default anywhere, including outside Quebec, the EEA or the United Kingdom.

Your choice is kept in your browser’s local storage under the name peakify-consent, on this device only. It is not sent to our servers and is used for nothing except deciding whether to load the trackers below.

If your browser sends the Global Privacy Control signal, we treat it as a rejection and load nothing non-essential, without asking. A choice you make in the banner takes precedence over that signal.

3. Strictly necessary, always on

These keep the Sites working. They are not used for analytics or advertising and cannot be switched off in our systems.

• Sign-in cookies from Supabase Auth (names beginning sb-) that keep you signed in to the app.
• Cloudflare Turnstile, the bot check on signup, sign-in and other public forms. It may set a short-lived verification cookie so you are not challenged twice.
• Our own chat widget keeps your conversation in your browser’s local storage so it survives a page reload. It does not track you across other sites.
• The consent choice itself, described in section 2.
• Hosting and edge cookies that Vercel and Cloudflare may set for routing and bot mitigation.
• Error monitoring. We use Sentry to catch application errors so we can fix them. Its browser script sets no advertising or cross-site tracking cookie; anything it keeps client-side is a short-lived technical identifier used to group related error reports. It runs on every visit because a site we cannot diagnose is a site we cannot keep working.

4. Analytics, only with your consent

With your consent we load a small set of tools to see how the Sites are used in aggregate: which pages are slow, and which are confusing. None of them is used to build an advertising profile, and we do not sell or share this data with advertisers.

• Google Analytics 4 (Google LLC): aggregate traffic measurement on our public pages, where configured. Sets Google’s standard measurement cookies (_ga, _ga_*, _gid). Data is processed in the United States. We do not use it for remarketing or advertising audiences.
• Vercel Analytics (Vercel Inc.): cookie-light, page-level traffic measurement. Data is processed in the United States.
• Vercel Speed Insights (Vercel Inc.): real-user page performance measurement. Data is processed in the United States.

5. Referral tracking, only with your consent

Where our partner programme is enabled, Rewardful sets a referral cookie on the public marketing site so that, if you sign up, the partner who sent you can be credited. It loads only after you accept non-essential cookies. If you reject, you can still sign up; the partner simply is not credited. Data is processed in the United States.

6. Advertising cookies

None. We do not run the Meta Pixel, LinkedIn Insight Tag, Google Ads remarketing tags or any equivalent. If we ever add one, we will update this policy first, keep it off by default everywhere, and ask for your consent before it is set.

7. How to change your choice

Press the button below to forget your choice on this device. The banner will ask you again, and a rejection takes effect for every page you load after it. Withdrawing consent does not undo data already collected while it was granted.

You can also block or delete cookies in your browser’s privacy settings. Blocking the strictly necessary ones will break parts of the Sites, including signing in.

8. Where the data goes

The companies named above process data in the United States. We rely on contractual protections with each of them, and a full list of the providers that process personal information for us, with what each does and where, is on our Sub-Processor List.

9. Children

The Sites are not directed to children under 13 and we do not knowingly set cookies on their devices. If you believe a child has used the Sites, contact us so we can look into it.

10. Changes and contact

A material change to this policy, such as a new tracker or a new legal basis, will be announced by a fresh banner on your next visit. Questions about this policy or about cookies on your device: support@peakifyhub.com, or Peakify Hub Inc., 214 Selkirk Avenue, Winnipeg, Manitoba, Canada R2W 2L6. Our privacy officer is Philip Akoji.