Cookie Policy
We use cookies and similar technologies to keep OwlScran working, to measure how it is used, and to improve the product. You can change your preferences at any time using the cookie preferences button in the site footer.
For full details on how we handle personal data, see our Privacy Policy. The legal detail on each category below (including lawful basis under UK GDPR and the PECR classification) is in section 5 of the Privacy Policy.
Your choices
- Strictly Necessary: Always on. These are required for OwlScran to function and cannot be disabled.
- Campaign tags (always on): Always on. These store the campaign or UTM from the landing URL so we know how you found OwlScran. They are not a user ID. Cookie Preferences do not turn them off.
- Analytics (opt-out): On by default under the PECR statistical purposes exception. You can turn these off in Cookie Preferences. Data is used only for aggregate statistical analysis.
- Cookie-free aggregate analytics: Plausible and Vercel provide aggregate measurement without visitor cookies. Cookie Preferences do not control it. You can turn it off using the anonymous analytics preference.
- Session Replay (opt-in): Off by default. Only activated if you explicitly opt in via Cookie Preferences. You can withdraw consent at any time.
- Server-side product measurement: Recorded by our servers when a signed-in user uses the service. Cookie Preferences control browser analytics only, so this measurement continues when browser analytics is off.
Cookie and tracking inventory
| Cookie / Technology | Provider | Purpose | Category | Duration |
|---|---|---|---|---|
| Supabase auth cookies (sb-*) | Supabase | Authentication and session management | Strictly Necessary | Session / as set by Supabase Auth |
| owlscran_consent | OwlScran | Stores your cookie consent preferences | Strictly Necessary | 180 days |
| statsig_stable_id | Statsig | Stable device identifier for consistent feature-gate assignment. Browser analytics stops after opt-out. | Strictly Necessary | 400 days |
| owlscran_attr_ft / owlscran_attr_lt | OwlScran | Stores the campaign tags from the landing URL, such as UTM values. These are not a user ID. Page scripts cannot read these cookies. Cookie Preferences do not turn them off. | Campaign tags (always on) | 90 days |
| owlscran_attr_state | OwlScran | Readable marker set to captured after we store campaign tags. Stops repeat attribution requests. Cookie Preferences do not turn this off. | Campaign tags (always on) | 90 days |
| PostHog product analytics | PostHog | Measures browser page views, product use, errors and page performance through our managed first-party e.owlscran.com endpoint. Browser collection stops when analytics is turned off. | Analytics (opt-out) | As set in OwlScran’s PostHog data retention settings |
| Plausible Analytics | OwlScran-hosted Plausible | Aggregate browser page-view analytics. Uses no visitor cookies. | Cookie-free aggregate analytics | Aggregate statistics only |
| Vercel Web Analytics and Speed Insights | Vercel | Measures aggregate visits and page performance without visitor cookies. Private pages are excluded. The anonymous analytics preference stops this measurement. | Cookie-free aggregate analytics | As set in OwlScran’s Vercel retention settings |
| Authenticated server product events | OwlScran, PostHog and Statsig | Measures signed-in use from accepted page requests and completed product actions using an internal user ID. Excludes names, email addresses and URL query strings. | Server-side product measurement | As set in OwlScran’s provider retention settings |
| PostHog session replay | PostHog | Records browsing sessions for product improvement when you opt in. Recording stays off on admin pages and private share pages. | Session Replay (opt-in) | As set in OwlScran’s PostHog data retention settings |
We read UTM parameters and click identifiers (such as gclid and fbclid) from your URL when you arrive at OwlScran. We store them in the campaign-tag cookies above. They are not a user ID. We do not set these identifiers ourselves.
This page was last updated in September 2026. If we add new cookies or tracking technologies, we will update this page and, where required, ask for your consent before activating them.