Cookie Policy

Last updated: February 19, 2026

1. What Are Cookies and Similar Technologies

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work more efficiently and to provide information to the website operators. Cookies can be "session" cookies (deleted when you close your browser) or "persistent" cookies (remain on your device until they expire or you delete them). In addition to cookies, we use similar technologies including session storage (browser-based storage that persists for the duration of your browser session) and local storage (browser-based storage that persists until cleared). This policy covers all of these technologies.

2. How We Use Cookies and Tracking Technologies

FunnelLeaks, LLC ("FunnelLeaks," "we," "us") uses cookies and similar technologies on FunnelLeaks.app to operate, secure, and improve the Service. We use cookies to authenticate your session, remember your preferences (such as light/dark theme), ensure the security of your account, and track usage patterns on our public pages for analytics purposes.

3. Types of Cookies and Technologies We Use

3.1 Strictly Necessary Cookies

These cookies are essential for the Service to function. They include: session cookies for authentication (connect.sid -- keeps you logged in, stored in a PostgreSQL-backed session store), CSRF protection tokens (csrf-token -- prevents cross-site request forgery attacks), and security-related cookies. These cookies are set automatically and cannot be disabled as the Service will not function without them.

3.2 Functional Cookies and Local Storage

These technologies remember your preferences and settings, including: theme preference (light or dark mode, stored in localStorage), sidebar collapsed/expanded state (stored in localStorage), and other UI preferences. They enhance your experience but are not strictly necessary for the Service to operate.

3.3 Analytics and Tracking

We use session storage to maintain an analytics session identifier (fl_session_id) that tracks your page-by-page navigation across our public pages during a single browser session. This identifier is generated randomly and is not linked to your personal identity. It is used to count unique sessions and understand how visitors navigate our public-facing pages and blog. When configured, we may also use Google Analytics (GA4) to collect additional analytics data including page views, session duration, and traffic sources. Google Analytics uses its own cookies and is subject to Google's privacy policy.

3.4 Internal Behavior Tracking

For authenticated users, we track page views, feature usage, and actions performed within the application through server-side logging. This tracking uses your authenticated session and records actions in our audit log system. This data is used for security monitoring, customer support, and service improvement. This tracking is integral to the Service and cannot be disabled independently.

4. Third-Party Cookies and Services

4.1 Stripe (Payment Processing)

Our payment processor, Stripe, Inc., may set cookies when you interact with the checkout process, including cookies for fraud prevention and payment security. These cookies are governed by Stripe's own cookie and privacy policies.

4.2 Google Analytics (Optional)

If configured, Google Analytics (GA4) sets cookies to distinguish unique users and throttle request rates. These cookies are governed by Google's privacy policy. You can opt out of Google Analytics by using the Google Analytics Opt-out Browser Add-on.

4.3 Ad Platform Integrations

When you connect advertising platforms such as Google Ads or Meta Ads to FunnelLeaks, those platforms may set their own cookies when you authenticate your accounts. These cookies are governed by the respective platform's cookie and privacy policies. FunnelLeaks does not set advertising or retargeting cookies. We do not use cookies to track you across other websites or to serve advertisements.

5. Cookie Consent

When you first visit FunnelLeaks.app, you will be presented with a cookie consent banner. Strictly necessary cookies (authentication, CSRF protection) will be set regardless of your choice, as they are required for the Service to function. You may accept or decline non-essential cookies (analytics, functional preferences). You can change your preferences at any time by clearing your browser cookies and revisiting the site, or by managing cookies through your browser settings.

6. Data Collected Through Tracking Technologies

Through the cookies and tracking technologies described above, we collect: IP address, browser type and version, device type and operating system, pages visited (limited to public pages for anonymous visitors), session duration and navigation patterns, referral source (the page or website that directed you to us), and timestamps of visits. For authenticated users, we additionally record: actions performed within the application, features accessed, and administrative operations. For complete details on how we use this data, please refer to our Privacy Policy.

7. Managing Cookies

Most web browsers allow you to control cookies through their settings. You can set your browser to refuse cookies, delete existing cookies, or alert you when a cookie is being set. To manage local storage and session storage, you can use your browser's developer tools or clear all site data through your browser settings. Please note that disabling strictly necessary cookies will prevent you from using the Service. Disabling analytics cookies will not affect the core functionality of the Service.

8. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature. The Service currently does not respond to DNT signals. Our internal analytics system tracks public page visits regardless of DNT settings, as this tracking uses session storage rather than cookies. If industry standards for DNT are adopted in the future, we will revisit this policy.

9. Changes to This Policy

We may update this Cookie Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. Material changes affecting how we track your behavior or what cookies we set will be communicated prominently. Continued use of the Service after changes constitutes acceptance of the revised policy.

10. Contact Us

If you have questions about our use of cookies and tracking technologies, please contact us at: FunnelLeaks, LLC. Email: legal@funnelleaks.app. Website: https://funnelleaks.app