Privacy and cookies

Analytics, only if you accept

We use Google Analytics, through Firebase, to count visits and see which kinds of pages people open. It loads only after you choose Accept analytics; before that, and if you reject, nothing from Google loads.

• We send the kind of page (for example "a report page"), never the ids, titles, emails or search text in the address.
• No user ID, no advertising, no ad personalisation and no Google signals.
• Google sets the cookies _ga and _ga_<id> on this site's own host only, kept for up to 13 months.
• Firebase also keeps an installation id in your browser's storage (IndexedDB) and contacts firebaseinstallations.googleapis.com and firebase.googleapis.com.
• Rejecting, at any time, stops it and removes those cookies straight away. Firebase's browser storage is removed too, once you reload or leave the page (the browser can't delete it while Firebase still has it open).
• If your browser sends Do Not Track or Global Privacy Control, analytics never loads and we don't ask.

Your choice: not made yet. Change it in Cookie settings. We ask again after 12 months.

Our own Flawsnap analytics, also only if you accept

On flawsnap.com we also use Flawsnap Insights, our own product, to see which pages are visited and where people get stuck. Like Google Analytics, it waits for Accept analytics: before that, and if you reject, it sends nothing. What it sends goes only to backend.flawsnap.com.

• To count returning visitors, it keeps a random visitor id in your browser's local storage, under snaplog.uid.pk_2bc033b83245e70af2914d7c87117cfa. It's created only after you accept, and isn't linked to your name, email or account.
• Rejecting, at any time in Cookie settings, stops Insights and deletes the id straight away. If you accept again later, you get a new id with no link to the old one. Your choice expires after 12 months: on your next visit after that, the id is deleted until you choose again. Clearing this site's data in your browser deletes it too.
• If your browser sends Do Not Track or Global Privacy Control, Insights never runs and no id is stored.
• If you report a bug through the Flawsnap button, it remembers the details you typed in your browser for next time.

Cloudflare Web Analytics

We use Cloudflare Web Analytics on flawsnap.com and app.flawsnap.com to measure page load times and visits. Cloudflare adds it to every page, whatever your cookie choice. It sends Cloudflare the address of the page you're on and of the page you came from (without anything after a ? or #), and timing data from your browser. It doesn't use cookies and doesn't track you across sites. See Cloudflare's privacy policy.

Needed for the site to work

These don't need your consent, and none of them is used for analytics or ads.

• In your browser's local storage: your sign-in (if you sign in), light or dark mode, your cookie choice, and unsaved drafts of card descriptions.
• In your browser's session storage, until you close the tab: the campaign tags of the link you arrived by (flawsnap.utm), how you found us for a sign-up (flawsnap.attribution: the same tags, the referring site's address and your first page), the plan you picked before signing up, and an email code screen in progress.
• Cloudflare Turnstile checks that you're human on the sign-in, sign-up, invite and waitlist forms, to keep bots out. On the landing page it loads only once you start typing in the waitlist form.
• Sign in with Google sets a short-lived cookie on backend.flawsnap.com while you sign in with Google.
• The intro video on the landing page loads nothing from YouTube until you press play. Then it plays in YouTube's privacy-enhanced player (youtube-nocookie.com), under YouTube's own privacy policy.

How you found us

When you create an account, we record how you found us: the campaign tags of the link you followed (utm_source, utm_medium, utm_campaign, utm_content, utm_term), the website that referred you (its address only), and the first page you landed on. We use it only to understand which channels bring sign-ups. It isn't shared and isn't used for advertising.

The waitlist

If you join the waitlist, we keep your email and the campaign tags of the link you arrived by (utm_source, utm_medium, utm_campaign), to send you product news and see which channels work. We never share it. To be removed, email [email protected].

More

The Terms of Service cover your account and the data your widget, SDK and extension collect; the subscriptions, billing and cancellation policy covers payments. Questions: [email protected], or see Support.