Cookie Policy | Tamats

1. What cookies we use

Cookies and similar technologies (localStorage) store small amounts of data in your browser. We use two categories:

Essential — required for the service to function. These cannot be turned off. They include your authentication session (Supabase), security/CSRF protection, and your cookie choice itself. No consent is required for these.
Analytics — optional. They help us understand product usage so we can improve Tamats. These load only after you opt in.

Our web analytics from Vercel is cookieless and aggregate, so it does not require consent.

2. Details

Cookie / technology	Category	Provider	Purpose	Duration
Auth session	Essential	Supabase	Keeps you signed in	Up to 400 days, refreshed while you use the service
Cookie choice	Essential	Tamats	Remembers your consent preferences	Until you clear your browser storage or our cookie categories change (localStorage)
`ph_*`	Analytics	PostHog	Product analytics (only with consent)	1 year
`_ga`, `_ga_*`	Analytics	Google Analytics	Aggregate usage measurement (only with consent)	2 years

3. Your choices

When you first visit, we ask whether to allow analytics cookies. You can change your choice at any time — analytics cookies stay off until you opt in, and are cleared when you opt out.

You can also block or delete cookies in your browser settings, though blocking essential cookies may break sign-in. For how we handle the data collected, see our Privacy Policy.

Do Not Track and Global Privacy Control. Our sites do not currently respond to these browser signals. Because analytics is opt-in, every visitor is treated as declined until they opt in — regardless of any signal — and we do not sell or share personal data for cross-context behavioral advertising.