Cookie Policy

• Authentication session cookies — strictly necessary cookies that keep you signed in (secure, httpOnly). Without them the application cannot work.
• Local storage preferences — theme, sidebar state, page filters and similar UI settings stored in your browser’s localStorage. These are not cookies and are never sent to the server.

We use Google Analytics 4 and PostHog to understand which marketing pages bring traders in — page views, referrer, approximate country and device type. Google truncates IP addresses before storage; PostHog stores a random ID in your browser, never your journal content. We do not send either provider your account, journal or billing data.

PostHog may also record anonymized session replays of the PUBLIC marketing pages (landing, pricing, checkout) — the pages you interact with before signing in, so we can see where visitors get stuck. Every form input is masked (no typed text is recorded), and your signed-in journal is never recorded: recording cannot start there.

Analytics sets its own cookies/local storage entries (_ga, _ga_*, ph_*) only after you agree.

Visitors in the EEA, the United Kingdom and Switzerland are asked for consent before anything loads. Elsewhere, analytics loads directly; you can still opt out at any time via “Cookie settings” in the footer.

Declining is one click and changes nothing else: every part of UP Journal works identically without analytics.

No advertising cookies, no social-media trackers, no fingerprinting. Paddle may set its own cookies on its checkout pages to process your payment securely and to fight fraud — that processing is governed by Paddle’s own policies and happens on the Paddle checkout surface.

You can accept or decline analytics from the consent banner, or change your mind later via “Cookie settings” in the footer — it re-opens the banner and your new choice applies immediately. You can also clear or block cookies in your browser settings; blocking our session cookie will sign you out and prevent login.