Cookie Policy
This page lists every cookie IntactShot sets, what each one is for, and how long it lasts. It sits alongside our Privacy Policy, which covers everything else we do with your data.
1. Strictly necessary cookies
These make the Service work. They keep you signed in between pages and protect your session. They are not used to profile you and they cannot be switched off without breaking sign-in, so — as the law provides for cookies of this kind — we do not ask for consent to set them.
sb-…-auth-token— set by Supabase Auth, our authentication provider. Holds your session so you stay signed in. Cleared when you sign out. During sign-in with Google a short-lived companion value is set and removed as soon as the exchange completes.trg_consent— records the choice you make below, so we do not ask again on every visit. Contains your preference and the date you made it; no identifier, nothing that identifies you. Expires after six months, after which we ask again.intactshot_locale— remembers the interface language you picked, so pages load in it. Contains only the language code. Expires after one year.trg_terms_ack— set when you tick the terms box at sign-up, so your acceptance is still recorded when you leave the page to sign up with Google or to confirm your email address. Contains no identifier. Expires after ten minutes.pw-recovery— set only when you open a password-reset link from your email, so the page that sets your new password knows the link was really opened. Contains no identifier. Expires after fifteen minutes.
2. Optional cookies — analytics
This loads only if you accept the analytics category. Until you do, the script is never added to the page at all — it is not loaded and disabled, it is absent. Turn the choice back off and it stops and its identifiers are deleted.
- PostHog (EU region) — product analytics: which features get used and where people get stuck, and the in-app chat widget you can use to reach us. Sets
ph_<key>_posthog, holding a randomly generated visitor number, for one year. It records where you click and scroll, replays your visit as a reconstruction of the pages you saw, and powers the in-app chat and the occasional short survey we may show you. Two things are deliberately kept out of that recording: what you type into a field is masked before it leaves your browser, and every image and video inside your account is blocked — so the product photography you upload and the videos you generate are never captured, only the empty space where they sat.
The choice genuinely governs what runs: anything in the analytics category is blocked from loading until you turn it on, and stops if you turn it back off. Nothing here is used for advertising, remarketing or building a profile of you, and we neither sell nor share this data.
Separately, and without setting any cookie, we run Sentry for error monitoring: when something breaks it sends us the technical details of the failure so we can fix it. It stores nothing in your browser, does not record your screen, and is configured not to collect your IP address. Because it identifies no one and exists to keep a paid service working, it runs on our legitimate interest rather than on your consent. It is listed as a processor in our Privacy Policy.
3. Cookies set by other companies
When you pay, checkout is hosted by Dodo Payments, our Merchant of Record. They set their own necessary cookies on their own pages to process the payment and prevent fraud. Those cookies are governed by their own policies, not ours, and we cannot switch them on or off for you.
4. Your choice
You can change your mind at any time, and withdrawing is as easy as giving consent. Use the button below to reopen the options, or clear cookies for this site in your browser to reset everything.
Blocking strictly necessary cookies in your browser is your right, but sign-in will not work if you do — the Service has no way to remember who you are between pages.
5. Contact
Questions about this policy: support@intactshot.com.