Legal
Cookie Policy
Last updated: May 27, 2026
This page lists every cookie and similar storage technology PDCAtracker may set on your device, what each one is for, how long it lives, and whether it is set by us or by a third party. For the broader privacy context (what data we process, why, and your rights), see our Privacy Policy.
You can change your cookie choice at any time using the “Cookie preferences” link in the page footer.
Categories we use
Strictly necessary
Required for the app to function: signing you in, protecting against cross-site request forgery, and remembering your cookie choice itself. These are set without consent because the service cannot run without them (GDPR Article 6(1)(f) / ePrivacy Article 5(3) - exemption for cookies strictly necessary to provide a service requested by the user).
Product analytics (optional)
Used only after you click Accept or enable the Analytics toggle in cookie preferences. Helps us see which features are used so we know where to invest. We do not use these cookies for advertising, profile building, or sharing with marketing partners.
Cookies we may set
| Name | Purpose | Duration | Party | Category |
|---|---|---|---|---|
| session | Keeps you signed in between page loads. | 30 days (rolling) | First-party | Strictly necessary |
| csrf_token | Protects forms against cross-site request forgery. | Session | First-party | Strictly necessary |
| pdca_cookie_consent | Remembers your cookie choice so we don't ask again. | 180 days | First-party | Strictly necessary |
| ph_* / ph_phc_* | PostHog product analytics. Distinguishes anonymous and signed-in sessions to measure feature usage. | 365 days | Third-party (PostHog) | Product analytics |
Cookie names that start with ph_ are set by PostHog only after you grant consent. If you reject non-essential cookies, no PostHog cookies are written and the PostHog script does not initialize.
Third parties
The only third-party service that may set cookies is PostHog (product analytics, US-hosted with EU data residency option). We do not run any advertising, retargeting, social media, or data broker scripts on PDCAtracker.
Your choices
You have four ways to control cookies on PDCAtracker:
- Use the consent banner shown on your first visit (Accept all, Reject non-essential, or Manage preferences).
- Click “Cookie preferences” in the footer at any time to change your mind. Your previous choice is cleared and the banner reappears.
- Configure your browser to block third-party cookies, all cookies, or only specific domains. Note: blocking strictly necessary cookies will prevent you from signing in.
- For EEA / UK residents: under GDPR you have the right to withdraw consent at any time without affecting the lawfulness of processing already carried out. See the Privacy Policy for full rights and how to exercise them.
Changes to this policy
If we add or remove a category of cookies, we will update this page and (for new non-essential categories) re-ask for consent. The “Last updated” date at the top of this page reflects the most recent change.
Contact
Questions about cookies or this policy? Email privacy@pdcatracker.com.