Cookie Policy
Last updated: August 18, 2026
1. What Are Cookies?
Cookies are small text files that are stored on your device (computer, tablet, or mobile phone) when you visit a website. They help websites function properly, remember your preferences, and provide information to website owners about how visitors use their sites.
This Cookie Policy explains what cookies PromptScout uses, why we use them, and how you can manage your cookie preferences in accordance with EU Directive 2009/136/EC (the "Cookie Directive"), the General Data Protection Regulation (GDPR), and Polish telecommunications law (Prawo telekomunikacyjne).
2. Data Controller
The data controller responsible for cookies on this website is:
Łukasz Starosta
Sole Proprietorship (Jednoosobowa Działalność Gospodarcza)
NIP: 7282877975
Address: Gogola 8, 92-513 Łódź, Poland
Email: lukasz@promptscout.app
3. Types of Cookies We Use
We categorize cookies based on their purpose and necessity:
3.1 Strictly Necessary Cookies
These cookies are essential for the website to function properly. They enable core functionality such as security, authentication, and session management. You cannot opt out of these cookies as the website cannot function without them.
| Cookie Name | Purpose | Duration |
|---|---|---|
| sb-*-auth-token | Supabase authentication session | Session / 1 year |
| sb-*-auth-token-code-verifier | OAuth PKCE security verification | Session |
| promptscout.analytics.consent | Stores your analytics choice and the version of this policy you were shown. Contains no identifier. | 180 days |
3.2 Analytics Cookies
These cookies help us understand how visitors interact with our website. The data is pseudonymous rather than anonymous: it is keyed to a random identifier, and once you sign in we attach your PromptScout account ID so we can connect the sessions of one user. We do not send your email address to PostHog. This still counts as personal data, so we only set these cookies after you consent, and you can withdraw at any time.
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
| ph_* | PostHog (EU) | Product analytics: which pages and features you use | 1 year |
| ph_* | PostHog (EU) | Session replay, on our public onboarding | Recordings kept 30 days |
We use PostHog for analytics, hosted in the EU (Frankfurt, Germany). PostHog is privacy-focused and does not sell data to third parties. See PostHog's Privacy Policy.
3.3 Session Replay
If you accept product analytics, we record a masked replay of your visit to our public onboarding flow at /get-started, so we can see where it confuses people.
Recording stops the moment you leave that flow. We never record your dashboard, billing, payment, or sign-in screens. It is covered by your product analytics choice, so declining or withdrawing analytics turns it off too.
Replays are masked at maximum privacy in your browser, before anything is sent:
- Every text field and every piece of on-screen text is masked. Your website, brand, questions, answers, competitors, email address, and password are never readable.
- Only static interface labels that we have individually reviewed, such as button and step names, stay visible.
- Query strings are stripped from every URL, so links containing sign-in codes or invitations are never recorded.
- We do not record console output, network request or response bodies, or canvas content.
Recordings are stored by PostHog in the EU and deleted after 30 days. Because a replay can still show how an identifiable person used our product, we treat it as personal data even though it is masked.
3.4 Cookies We Do NOT Use
We do not use advertising, marketing, or third-party tracking cookies. We do not share your data with advertising networks or data brokers.
4. Legal Basis for Cookies
Under GDPR and the ePrivacy Directive:
- Strictly necessary cookies: No consent required. These are placed under our legitimate interest to provide a functioning website (GDPR Art. 6(1)(f)) and are exempt from consent under ePrivacy Directive Art. 5(3).
- Analytics cookies: Require your explicit consent (GDPR Art. 6(1)(a)). We only set these cookies after you have given consent via our cookie banner.
- Session replay: Covered by the same consent as product analytics (GDPR Art. 6(1)(a)), and described in the consent banner and cookie settings before you choose.
- Withdrawing consent: Under GDPR Art. 7(3) withdrawal must be as easy as giving consent. Both choices are stored for the same 180 days, and withdrawal is a single action in Cookie settings.
5. Managing Your Cookie Preferences
5.1 Cookie Consent Banner
When you first visit our website you will see a cookie consent banner. Accepting and declining are both a single click, and declining changes nothing about how PromptScout works for you.
You can change or withdraw your choice at any time using the Cookie settings link in the footer of every page. That panel lets you turn product analytics on or off, and offers a single Withdraw consent action that stops all analytics and recording immediately.
We remember your answer for 180 days, whether you accepted or declined. If we later change what we ask for, we will ask you again rather than assume your previous answer covers it.
5.2 Browser Settings
You can also control cookies through your browser settings. Most browsers allow you to:
- View what cookies are stored on your device
- Delete individual or all cookies
- Block third-party cookies
- Block cookies from specific websites
- Block all cookies
- Delete all cookies when you close the browser
Here are links to cookie management instructions for popular browsers:
Please note that blocking essential cookies may prevent you from using certain features of our website, including logging into your account.
6. Third-Party Cookies
Some cookies on our website are set by third-party services we use:
| Service | Purpose | Data Location | Privacy Policy |
|---|---|---|---|
| Supabase | Authentication | EU (Frankfurt) | Link |
| PostHog | Analytics | EU (Frankfurt) | Link |
We carefully select third-party services that respect user privacy and comply with GDPR. All our third-party services store data within the EU.
7. Your Rights
Under GDPR, you have the following rights regarding cookies and tracking:
- Right to consent: Give or refuse consent for non-essential cookies
- Right to withdraw consent: Change your cookie preferences at any time
- Right to access: Request information about cookies stored on your device
- Right to erasure: Request deletion of data collected via cookies
For more information about your data protection rights, please see our Privacy Policy.
8. Changes to This Cookie Policy
We may update this Cookie Policy to reflect changes in our practices or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about our use of cookies.
9. Contact Us
If you have any questions about our use of cookies or this Cookie Policy, please contact us:
PromptScout
Email: lukasz@promptscout.app