What we set
| Name | Kind | Purpose | Life |
|---|---|---|---|
| Session token | Essential | Keeps you signed in | 7 days |
| Request-protection cookies | Essential | Protects sign-in and form submissions | The session |
| Analytics identity | Analytics | Recognizes a returning device so events join into a session | 12 months |
The analytics cookie is deliberately not the vendor's default name and is not set across subdomains, so this app and the older Paddles Up app cannot pick up each other's device identity.
There is no cookie banner, and no switch in the app
We would rather say that plainly than describe controls we have not built.
Paddles Up is in beta. Essential cookies load because without them you cannot sign in. The analytics cookie loads too, for everyone signed in, and there is currently no setting in the app to turn it off and no consent banner asking you first.
We also do not yet honor Global Privacy Control, the browser signal some states require to be treated as an opt-out. We intend to; today we do not, and a page claiming otherwise would be worse than this one.
So the opt-out is a person. Write to privacy@paddlesup.io and we will exclude you from analytics and delete the session replays we already hold. You do not have to give a reason, and it will not affect your account.
Your browser's own cookie controls also still work, and blocking the analytics cookie does not break the app.
Session replay
Product analytics here includes session replay: a reconstruction of what happened in your browser — what you clicked, what moved, where you got stuck. We use it to reproduce bugs and to find the screens that confuse people.
Text is masked before it leaves your browser, and identifying values are stripped out of the URLs recorded alongside it. We do not record what you type into forms, and payment fields are Stripe's own frames, which we cannot see into at all.
It is named separately here because it deserves to be. It is the most invasive thing the app does, and a line item in a cookie table would undersell it.
First-party by design
Analytics is sent to this site and forwarded to PostHog without your cookies. We do this because browser content blockers drop requests to analytics hostnames and we lose most of our data — but the honest consequence is that a blocker that works by hostname will not stop this one. That is the main reason the paragraph above exists: the usual way you would opt yourself out of something like this does not work here, so we have to offer a real one.
Do Not Track
We do not respond to the DNT header, which never settled on an agreed meaning. As above, we do not yet honor GPC either.
Questions: privacy@paddlesup.io