Cookie Policy

Cookies are small text files a website stores on your device. We also use technologies that work similarly, browser local storage and session storage, and everything in this policy applies to those too, even though they aren't technically cookies.

Under Romanian Law 506/2004 and the EU ePrivacy rules, we may store information on your device without asking only where it is strictly necessary to provide a service you have asked for. Everything else needs your consent before it is set.

We use analytics cookies, so a banner asks you before any of them are set. It appears until you choose, with Allow and Decline side by side and nothing selected in advance. Declining costs you nothing, the Service works exactly the same either way, and we treat "no decision" as no.

Your choice covers both our website and the app, so you are only asked once.

We ask again after 180 days, because that is how long the cookie carrying your choice lasts, and sooner if we materially change how we use cookies. Those 180 days are how often we re-ask, not how long the record lasts: we keep the record of your current choice for as long as that choice stands, and delete a record you have replaced once it is 3 years old.

On our website, before you choose, we set no cookies, no third-party scripts and no analytics. The only thing stored is a local-storage flag recording that you have already seen the homepage introduction, so it does not replay on every visit. Verified on a fresh browser.

Strictly necessary

Required for the Service to work, or set because you asked for the thing they remember, so they can't be switched off.

Turnstile runs on the account security screens in the app: signing in, signing up, resetting a forgotten password, changing your password in Settings, and asking for a new confirmation email. Cloudflare receives your IP address, browser details and the page being protected, and states it can't identify individuals from them. It's there to tell people from bots and nothing else.

Analytics

Only set if you allow them. Nothing analytics-related runs until you choose, and declining leaves it off entirely.

We use PostHog on its European hosting, and no session replay anywhere.

The app and the website behave the same way. Automatic event capture is off in both, so we receive a short list of named actions and page views, which feature was opened, not what you typed or every element you clicked. In the app, page text is masked as well.

If you decline, PostHog stores one small flag on your device (__ph_opt_in_out_*) recording that refusal. It exists so that capture stays off, and it is the one piece of analytics storage a decline leaves behind.

Error tracking

We use Sentry to find and diagnose faults. When something breaks, it records what went wrong, technical details of the error, the page it happened on, and your browser and IP address, so we can fix it. It isn't analytics: it doesn't track what you do, only what fails. It stores nothing on your device, which is why it sits outside the consent banner: there is no storage to ask about, and the processing is covered by our legitimate interest in keeping the Service working.

Marketing

We don't use any. No advertising cookies, no retargeting, no conversion pixels, no affiliate tracking. If that ever changes, this policy changes first and we ask before setting anything.

Payments

We don't handle card details on our own pages. Checkout happens on Stripe's own site, so any cookies Stripe sets are set there, by them, under their policy, not on ours. Stripe's scripts don't run on our pages at all.

You can change or withdraw your cookie choices at any time, in the app under Account → Privacy, and on our website via the cookie settings link in the footer. Withdrawing consent is as easy as giving it, and takes one click.

If you withdraw, analytics stops immediately and what it had already stored on your device is cleared, apart from the small flag that records the refusal itself. Strictly necessary cookies stay, without them you can't stay signed in, and error tracking continues, because we need it to keep the Service working.

You can also block or delete cookies through your browser settings. Blocking strictly necessary cookies will stop parts of the Service working, you may not be able to stay signed in.

Where a cookie is set by one of our providers, that provider's own handling of the data is described in our Privacy Policy §7 (sub-processors) and §8 (international transfers).

We update this policy when our cookie use changes. The date at the top shows the last revision.

Questions: hello@skuascout.com, or SKUA LABS SRL, 85 Uverturii Boulevard, Building O14, Entrance A, Floor 4, Apartment 16, District 6, 060935 Bucharest, Romania.