Cookie Policy

1. The Analytics We Use

We use two analytics systems to understand how our website is used.

• Our own analytics. Processed and stored on our own infrastructure, hosted in the European Union (France). It counts page views and a few events on our public pages. Sections 2 and 3 describe it.
• PostHog. A product analytics service run by PostHog Inc. We use its EU Cloud, where the data is stored on servers in Frankfurt, Germany. Our site does not call PostHog directly: requests go to our own subdomain, ph.vernesoft.com, which passes them on to PostHog's EU servers.

PostHog runs only on our public website, our documentation, and the sign-in and registration pages. It does not run on the account recovery, email verification and password change pages, and it never runs inside the logged-in dashboard or the admin panel. It receives page views, page leaves, web vitals (page loading speed measurements) and a few events of our own, such as viewing the pricing page or clicking a sign-up button. Automatic click and text capture is switched off.

We do not use Google Analytics, Meta Pixel, Yandex Metrika, or any advertising network.

2. How Our Own Analytics Identifies Visitors (Weekly Salt Mechanism)

Our own analytics uses a privacy-preserving pseudonymous identification method. When you visit our site, we generate a temporary identifier by combining your IP address, browser user agent, and a secret salt value, then applying a one-way cryptographic hash (SHA-256). This identifier:

• Cannot be reversed to recover your IP address or any personal data
• Is automatically reset every week — the salt rotates on a weekly basis, making it impossible to track visitors across weeks
• Is not stored in your browser — it is computed on our server for each request
• Your raw IP address is never stored in our analytics database

3. What Our Own Analytics Collects

We collect the following data points for each page view:

• Page path — which page you visited (e.g., /pricing)
• Referrer — the website that directed you to us
• UTM parameters — campaign source, medium, and name (if present in the URL)
• Country and city — derived from your IP address via a local GeoIP database, then discarded (the IP itself is never stored)
• Device type — desktop, mobile, or tablet
• Browser family — e.g., Chrome, Firefox, Safari

PostHog receives the page address, referrer, UTM parameters, browser and device details that its script reads in your browser, and the events listed in section 1.

4. What We Do NOT Do

• We do not send analytics data to Google, Meta, Yandex, or any advertising network
• We do not use advertising cookies
• We do not perform cross-site tracking
• We do not use browser fingerprinting
• We do not store your IP address in our own analytics database
• We do not record you with PostHog inside the logged-in dashboard or the admin panel

The only third party that receives analytics data from us is PostHog, as described in section 1. The PostHog cookie described below is set on our own domain, but the data it supports goes to PostHog.

5. Cookies and Local Storage We Use

Authentication cookies (managed by Ory Kratos) are used only when you log in to the Tenant Panel and are essential for the service to function. These are not used for analytics.

6. With and Without Your Consent

If you decline, or have not answered the banner yet: both systems still count visits to our public pages. PostHog sets no cookie and stores no identifier in your browser, and it makes no session recordings. Instead, PostHog counts visitors with a hash it calculates on its own servers from your IP address, your browser's user agent, our site's hostname and a salt. According to PostHog's documentation, that salt changes every day and is deleted once the day's events have been processed, so the same visitor cannot be recognised from one day to the next, and your IP address is not used to add location data to these events.

If you accept: PostHog stores a random identifier in a cookie and in local storage (section 5), which lets it recognise you across pages and later visits. It also records your session on the pages where it runs (section 1): the pages you view and what you do on them, such as scrolling, mouse movements and clicks. What you type into form fields is masked and is not recorded. Nothing is recorded inside the dashboard or the admin panel. If you create an account after accepting, PostHog links that identifier to a pseudonymous identifier for the account (a salted hash), not to your email address.

Whatever you choose: when an account is created or changes to a paid plan, our server sends PostHog an event with the account's pseudonymous identifier and the plan name. These events contain no name, email address or IP address.

7. Tenant Panel (Logged-In Area)

For the Tenant Panel (the logged-in dashboard area), we apply a stricter standard: our own analytics collects no data about your activity there until you explicitly click "Accept" in our cookie consent banner. If you decline or do not interact with the banner, nothing about your activity in the Tenant Panel is sent to our analytics. PostHog does not run in the Tenant Panel at all, whatever you choose.

8. Your Choices

You can change your choice at any time with "Cookie Settings" in the page footer, or by clicking the button below. Opting out stores your choice, tells PostHog to discard its identifier and stop any recording, and switches PostHog back to the cookie-free counting described in section 6. Our own analytics stops recording activity inside the Tenant Panel. Opting out does not stop the cookie-free counting of visits to our public pages.

9. Data Retention

Data in our own analytics is automatically deleted after 13 months. Due to the weekly salt rotation, its visitor identifiers cannot be correlated across different weeks, even within the retention period. Data held in PostHog is kept under the retention settings of our PostHog account; to ask for something to be deleted, contact us (section 10).

10. Contact

If you have questions about this Cookie Policy, please contact us at support@vernesoft.com.