Cookies

DealAtlas uses essential cookies to keep a signed-in Supabase session and to protect authenticated workspace and billing routes. These cookies are required for the product to function.

Optional Google Analytics or Tag Manager scripts load only when the matching NEXT_PUBLIC_* placeholders are set and you have accepted analytics. If those values are empty, or you have not accepted, no measurement script is injected. A configured Search Console verification token is rendered as a meta tag and sets no cookies. Measurement must not receive buyer names or source URLs on free pages.

We use PostHog, hosted in the EU, to count page views, guide CTA views and clicks, sign-ups and upgrades so we can see which pages and guides help people. It loads only when our PostHog project key is configured and you have accepted analytics. PostHog itself sets no cookies and writes nothing to local or session storage: each visit is held in memory and forgotten when you close the tab.

PostHog never receives opportunity details. Page addresses are reduced to page types (for example /deals/[deal]), search terms and other query strings are removed except campaign (utm_*) tags, and referring sites are recorded by hostname only (without www.) or as “direct”. Location lookup from your IP address is switched off. Session recording, click autocapture, heatmaps, error and performance capture and surveys are switched off. Signed-in accounts are counted by an internal account ID only, never by email or name.

Analytics is off until you choose Accept analytics in the cookie notice or below. Before you accept, we store nothing for analytics and send nothing to PostHog, Google Analytics or Tag Manager.

If you accept, we keep your choice in the first-party cookie dealatlas_analytics_consent and in local storage under dealatlas:analytics-consent, for up to 180 days. We also keep a first-touch record in local storage under dealatlas:analytics-first-touch. It holds the cleaned landing path (for example /deals/[deal]), the referring site hostname or “direct”, the three campaign tags, the last guide CTA position and target, and the last guide slug. It never holds deal names, buyer names, notice IDs, source URLs, full referrer URLs, emails or account details. If you accept after landing, the first touch is the page where you accepted; we do not recover an earlier referrer.

DealAtlas does not set advertising or retargeting cookies as part of this technical SEO release. Paid acquisition and ad pixels are a later phase.