Cookie Policy
We use cookies and similar technologies to keep OwlScran working, to measure how it is used, and to improve the product. You can change your preferences at any time using the cookie preferences button in the site footer.
For full details on how we handle personal data, see our Privacy Policy. The legal detail on each category below (including lawful basis under UK GDPR and the PECR classification) is in section 5 of the Privacy Policy.
Your choices
- Strictly Necessary: Always on. These are required for OwlScran to function and cannot be disabled.
- Analytics (opt-out): On by default under the PECR statistical purposes exception. You can turn these off in Cookie Preferences. Data is used only for aggregate statistical analysis.
- Cookie-free aggregate analytics: Always on. Plausible and Vercel provide aggregate measurement without setting or reading visitor cookies, so Cookie Preferences do not control them.
- Session Replay (opt-in): Off by default. Only activated if you explicitly opt in via Cookie Preferences. You can withdraw consent at any time.
- Server-side product measurement: Recorded by our servers when a signed-in user uses the service. Cookie Preferences control browser analytics only, so this measurement continues when browser analytics is off.
Cookie and tracking inventory
| Cookie / Technology | Provider | Purpose | Category | Duration |
|---|---|---|---|---|
| Supabase auth cookies (sb-*) | Supabase | Authentication and session management | Strictly Necessary | Session / as set by Supabase Auth |
| owlscran_consent | OwlScran | Stores your cookie consent preferences | Strictly Necessary | 180 days |
| statsig_stable_id | Statsig | Stable device identifier for consistent feature-gate assignment. Browser analytics stops after opt-out. | Strictly Necessary | 400 days |
| Statsig feature gate cookies | Statsig | Delivers the correct product features and experiments | Strictly Necessary | Session / provider config |
| Statsig analytics events | Statsig | Page views, feature interactions, and experiment exposures | Analytics (opt-out) | Events retained for 1 year by Statsig |
| owlscran_attr_ft / owlscran_attr_lt | OwlScran | Stores first-touch and latest acquisition attribution. Cleared after opt-out. | Analytics (opt-out) | 90 days |
| PostHog product analytics | PostHog | Measures browser page views and product use through our first-party /ingest endpoint. Browser collection stops when analytics is turned off. | Analytics (opt-out) | As set in OwlScran’s PostHog data retention settings |
| HyperDX browser diagnostics | HyperDX / OpenTelemetry | Measures browser errors and navigation performance. Collection stops when browser analytics is turned off. | Analytics (opt-out) | As set in OwlScran’s HyperDX data retention settings |
| Plausible Analytics | OwlScran-hosted Plausible | Aggregate browser page-view analytics. Uses no visitor cookies. | Cookie-free aggregate analytics | Aggregate statistics only |
| Vercel Web Analytics | Vercel | Aggregate page view analytics. No cookies — visitor identified by a request hash discarded within 24 hours. | Cookie-free aggregate analytics | No persistent storage |
| Vercel Speed Insights | Vercel | Core Web Vitals performance measurement. No cookies and no personal identifiers. | Cookie-free aggregate analytics | No persistent storage |
| Authenticated server product events | OwlScran, PostHog and Statsig | Measures signed-in use from accepted page requests and completed product actions using an internal user ID. Excludes names, email addresses and URL query strings. | Server-side product measurement | As set in OwlScran’s provider retention settings |
| Statsig session replay | Statsig | Records browsing sessions (mouse movements, clicks, scrolling, page content) for product improvement | Session Replay (opt-in) | 30 days |
| HyperDX session replay | HyperDX | Records browsing sessions and network diagnostics for product improvement. Sensitive inputs are masked and admin routes are excluded. | Session Replay (opt-in) | As set in OwlScran’s HyperDX data retention settings |
We also read UTM parameters and click identifiers (such as gclid and fbclid) from your URL when you arrive at OwlScran and attach them to analytics metadata. We do not set these identifiers ourselves.
This page was last updated in July 2026. If we add new cookies or tracking technologies, we will update this page and, where required, ask for your consent before activating them.