Cookies (and similar local storage) keep you signed in, remember your preferences, and help us improve the product. This page lists every cookie Pipoh sets, why, and how to opt out.
For the underlying data-handling rules, see the Privacy Policy.
1. Categories
| Bucket | Required? | Examples |
|---|---|---|
| Essential | Yes — disabling breaks the app | Clerk session, CSRF token, cookie consent record |
| Analytics | Opt-in | PostHog distinct-id, PostHog session-replay binding |
| Performance | Opt-in | Sentry session replay (currently inactive — PostHog handles replay) |
We do not set advertising / cross-site tracking cookies. Pipoh has no third-party ad partners.
2. Detailed list
Essential
__session(Clerk) — signed JWT for server-route authentication. Session-scoped.x-pipoh-csrf(Pipoh) — CSRF token for cost-bearing POSTs. Session-scoped.pipoh-consent-v1(Pipoh) — records your consent so the banner doesn't reappear. 1 year.
Analytics (opt-in)
ph_<key>_posthog— distinct-id + feature-flag cache. 1 year.ph_<key>_posthog_session— session-replay binding (when sampled in). Session.
Performance
Sentry Session Replay is configured off — PostHog handles replay. The bucket exists for forward compatibility.
3. How to control cookies
Inside Pipoh
On first visit you'll see a banner with three choices:
- Aceitar todos — enables all categories.
- Apenas essenciais — only Essential; PostHog + Sentry replay disabled.
- Personalizar — toggle each non-essential bucket individually.
Change your choice at Account Settings → Privacy → Cookie preferences. Closing the banner without choosing defaults to essential only.
Inside your browser
Block / delete via browser settings. Blocking Essential breaks sign-in; others are safe to block.
4. Do Not Track / Global Privacy Control
We honor the GPC signal. When your browser advertises Global Privacy Control (navigator.globalPrivacyControl / Sec-GPC: 1), Analytics + Performance are automatically opted out — no banner interaction required — and PostHog captures nothing (it stays opted-out by default). The choice is recorded so we don't ask you again. DNT headers are deprecated but treated the same way for safety. An explicit opt-in you make here later (via the banner or Cookie preferences) takes precedence over the global GPC default.
5. Changes
When we add or remove cookies, the table above is updated and the Última atualização date moves. Material changes (e.g. new analytics vendor) trigger a fresh consent banner.
6. Contact
Cookie-specific questions: privacy@pipoh.ai.