Cookie Policy

What Are Cookies

Cookies are small text files stored on your device when you visit a website. They help the site function properly and remember your preferences. This policy also covers similar technologies such as localStorage and sessionStorage.

Cookies We Set

GodEye sets essential and functional cookies. Analytics cookies are loaded only if you accept the cookie banner:

• Account session cookies (sb-*) — Managed by Supabase for account authentication. HttpOnly, Secure. These store encrypted session tokens — not your password or personal data. Set only when you create an account or sign in. Expires after 1 year or when you log out.
• Language preference (locale) — Stores your selected language. Secure, SameSite=Lax. Expires after 1 year.

Analytics Cookies (consent required)

These cookies are set only after you click "Accept" on the cookie banner. If you decline, no analytics data is collected:

• PostHog (ph_*, __ph_*) — Product analytics and session replay. Tracks page views, click interactions, and records anonymized session replays — visual recordings of how you navigate the site. All text typed into form fields (passwords, search queries, etc.) is automatically masked and never captured. Data is sent to PostHog's US servers. Persists via localStorage and cookies.
• Google Analytics (_ga, _ga_*) — Usage analytics to understand traffic and page performance. Sets cookies to distinguish users and sessions. Data is processed by Google. See Google's privacy policy for details.

Browser Storage (localStorage)

The following preferences are stored locally in your browser and are never sent to our servers:

• Theme preference — Remembers your light/dark mode selection.
• Cookie consent — Records whether you have accepted or declined the cookie notice.
• Sidebar module order — Remembers your custom ordering of dashboard modules in the sidebar.
• Starred assets — Remembers which assets you have starred/pinned in the Trend Screener.

Third-Party Services

The Service integrates with the following third parties, which may set their own cookies or collect data according to their own policies:

• PostHog (analytics) — When you accept cookies, PostHog collects anonymized usage data and records session replays — visual recordings of your browsing session where all form inputs are masked. This helps us understand navigation patterns and fix usability issues. Data is sent to PostHog's US infrastructure. See PostHog's privacy policy for details.
• Google Analytics — When you accept cookies, Google Analytics collects page view and usage data. See Google's privacy policy for details.
• The Economist (embedded content) — Certain pages embed editorial content from The Economist via iframes. When you view this content, your browser connects to economist.com, which may set its own cookies or collect usage data. See The Economist's privacy policy for details.
• YouTube (video embeds) — Live news feeds may fall back to YouTube video embeds. When a YouTube embed loads, your browser connects to youtube.com, which may set cookies for analytics and ad tracking. See Google's privacy policy for details.
• Live video streams (news channels) — The Service streams live news channels via third-party CDNs (e.g. WarnerMedia). When you watch a live stream, your browser connects to the channel's content delivery network, which may log your IP address.
• Sentry (error monitoring) — Sentry automatically captures errors and performance data to help us fix bugs and maintain service reliability. When an error occurs, Sentry may collect your IP address (anonymized), browser type and version, operating system, the URL where the error occurred, and a stack trace. Sentry does not require cookie consent — it is classified as a strictly necessary service for maintaining site functionality. See Sentry's privacy policy for details.

What We Do Not Use

• No advertising, marketing, or retargeting cookies
• No cross-site tracking or behavioral profiling
• Analytics cookies are never loaded without your explicit consent

Data Retention

Authentication cookies expire after 1 year or on logout. The language cookie expires after 1 year. Google Analytics cookies expire after 2 years. PostHog data is retained according to PostHog's data retention policy. localStorage data persists until you clear your browser data or uninstall the site. We do not retain personal data beyond what is necessary for the Service to function.

Managing Cookies

You can clear cookies at any time through your browser settings. Note that clearing authentication cookies will log you out of the dashboard. To revoke analytics consent, clear your browser's localStorage (removing the "godeye-cookie-consent" key) and the cookie banner will reappear. You can also use your browser's private/incognito mode to prevent cookies from being stored. Blocking third-party cookies in your browser settings will prevent embedded third-party content (The Economist, YouTube) from setting their own cookies, but may affect content loading.

Changes to This Policy

We may update this policy if we change how we use cookies or integrate new services. The "last updated" date at the top reflects the most recent revision.