Cookie Policy
Last updated: 6 April 2026
This Cookie Policy ("Policy") explains how the Flashvery Operator Team ("we", the "Operator") uses cookies and similar technologies on the Flashvery website and app (the "Service"). This Policy supplements the Privacy Policy.
1. Scope & Placement
- This page explains how we use cookies and analytics technologies.
- For individual rights and other privacy details, see the Privacy Policy.
2. Our Analytics Approach
Default measurement (all visitors)
- We load Google Tag Manager (GTM) and Google Analytics 4 (GA4) and use anonymous analytics cookies (auto-generated IDs that do not identify you personally) for measurement by default. These auto-generated IDs are randomly assigned and are not linked to your name, email address or other personal information.
- If your browser sends Do Not Track (DNT) or Global Privacy Control (GPC), we do not load these analytics tools.
Account-linked analytics (logged-in users, optional)
- When you are signed in, you can choose whether to allow account-linked analytics (linking measurement to your account and PostHog custom events) in Account Settings.
- If you turn this off, anonymous analytics cookies (which do not identify you personally) may still be used for measurement as described above.
PostHog (logged-in users)
- Session replay: We may record anonymous replays of screen interactions. Text and inputs are masked. This may apply to all signed-in users and does not require opt-in. If your browser sends DNT or GPC, PostHog will not perform measurement.
- Custom events and account linking: Features such as A/B tests, event measurement and linking to your account may run when you turn on personalized usage analytics in Account Settings.
3. Types of Cookies We Use
Essential Cookies
Always active. Required for basic site functionality:
| Cookie | Purpose | Retention |
|---|---|---|
authjs.session-token | Session authentication | Session |
authjs.csrf-token | CSRF protection | Session |
NEXT_LOCALE | Language preference | 1 year |
Analytics
| Provider | Purpose | Enabled by |
|---|---|---|
| GA4 | Page views, events, aggregates | Anonymous cookie-based measurement by default via GTM. Account linking when you opt in via account settings (logged-in) |
| PostHog | Session replay (masked) | After sign-in when DNT/GPC are not enabled; no opt-in required |
| PostHog | Custom events, advanced analytics | Account settings: personalized usage analytics on |
4. Do Not Track (DNT) & Global Privacy Control (GPC)
We respect privacy signals:
- DNT (Do Not Track): If enabled in your browser, we do not load GTM/GA4 analytics scripts, and PostHog will not perform measurement.
- GPC (Global Privacy Control): If enabled, we apply the same restrictions.
These signals are automatically detected and honored.
5. Managing Your Choices
For all visitors
- Anonymous analytics cookies may be used for default measurement as described above.
- DNT/GPC disables loading of GTM/GA4 and PostHog measurement.
For logged-in users
- Go to Account Settings to manage personalized / account-linked analytics.
- Toggle personalized usage analytics to control account linking and PostHog custom events / account identification. Session replay may continue (masked) when DNT/GPC are off, regardless of this toggle.
Browser settings
You can also:
- Enable DNT in your browser settings
- Install a GPC-supporting extension
- Clear cookies in your browser settings
6. Third-Party Services
| Service | Purpose | Data shared | Notes |
|---|---|---|---|
| GA4 | Page views, events | As configured in GTM/GA4 | Anonymous cookie measurement by default. Account linking when you opt in |
| PostHog | Session replay | Masked anonymous replay | After sign-in (unless DNT/GPC); no opt-in required |
| PostHog | Custom events | When you opt in | When you opt in |
7. Regional Notes (EEA/UK/Switzerland)
- Anonymous analytics cookies (auto-generated IDs that do not identify you personally) used for default measurement may be based on legitimate interests (service quality improvement).
- Anonymous session replay (masked) may be based on legitimate interests; account-linked analytics relies on your consent in account settings.
- You may withdraw consent for account-linked analytics at any time; withdrawal does not affect the lawfulness of processing before withdrawal.
8. Changes to This Policy
We may update this Policy to reflect legal or service changes. Where material, we will provide notice on the site.
9. Contact
- Flashvery Operator Team
- Email: support@flashvery.com