Cookie Policy

1. Cookies and similar technologies

Cookies are small text files sites store in your browser. We also use browser local storagefor login state and preferences—functionally similar to cookies for privacy choices. Together we refer to these as "technologies" in this policy.

The PostShuttle Service is owned and developed by PostShuttle. In this policy, "we" means PostShuttle as operator of the Service. PostShuttle uses essential technologies so the app can authenticate you and remember your cookie choice. If you click Accept analytics on the banner, we may load optional error/performance telemetry (Sentry) that can set its own cookies or identifiers. If you choose Essential only, that optional telemetry stays off until you change your mind and accept analytics (a page reload may be needed for the change to apply).

2. How we use these technologies

2.1 Essential

Required to operate PostShuttle, including:

• Storing your authenticated session in a secure HTTP-only cookie so browser scripts cannot read session tokens
• Storing your cookie choice in local storage (cookie_consent_preference)
• Security-related data Next.js or our host may set (for example CSRF or routing)

We do not ask for consent before essential storage because the Service cannot work without it.

2.2 Optional analytics / telemetry

If you choose Accept analytics, we enable Sentry (or similar) to capture errors and performance data to diagnose bugs, and may load Google Tag Manager for usage analytics configured in our container. Those providers may use cookies or persistent identifiers under their own policies. Choosing Essential only keeps this disabled.

2.3 Third parties on specific pages

hCaptcha may load on signup, login, or contact flows. It can set or read cookies or similar data on its domain to distinguish humans from bots. See hCaptcha’s documentation for details. Stripe may set cookies when you manage payment methods on billing pages. Social OAuth flows happen on each network’s site and are governed by that network’s policies.

3. Session vs persistent

Browser session cookies expire when you close the tab or browser. Persistent cookies or local storage entries remain until they expire, you clear site data, or you log out. Our authentication cookie persists until sign-out or server-side expiry.

First-party storage is set by the website origin that hosts PostShuttle (your browser will show the Service’s domain). Third-party cookies or scripts may appear when you opt into analytics, complete a captcha, pay with Stripe, or authorize a social network—each provider’s policy applies.

4. Storage keys and cookies (summary)

Timezone and profile data are stored on our servers with your account, not in this table. We update this page when we add materially new trackers.

5. Managing Your Cookie Preferences

You have the right to accept or reject cookies. Most web browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies if you prefer. However, this may prevent you from taking full advantage of the Service.

5.1 Browser Settings

You can control cookies through your browser settings. Here are links to instructions for popular browsers:

• Google Chrome: Settings → Privacy and security → Cookies and other site data
• Mozilla Firefox: Options → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Cookies and website data
• Microsoft Edge: Settings → Privacy, search, and services → Cookies and site permissions

Please note that if you disable cookies, some features of the Service may not function properly or may be unavailable.

5.2 Cookie consent banner

When you first visit, we show a banner: Essential only or Accept analytics. Clearing site data for the PostShuttle site removes the choice and the banner will reappear. Switching to analytics may reload the page so telemetry initializes correctly.

5.3 Opt-Out Tools

You can also opt out of certain third-party cookies by visiting:

• All About Cookies - General cookie management information
• Your Online Choices - European Interactive Digital Advertising Alliance opt-out
• Network Advertising Initiative - NAI opt-out page

6. Impact of Disabling Cookies

If you choose to disable cookies, some features of the Service may not work as intended. Specifically:

• You may not be able to log in to your account
• Your preferences and settings may not be saved
• Some features may be unavailable or function incorrectly
• We may not be able to provide you with personalized content
• Security features may be compromised

We recommend that you leave cookies enabled to ensure the best experience with our Service.

7. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites you visit that you do not want to have your online activity tracked. Currently, there is no standard for how DNT signals should be interpreted. As a result, our Service does not currently respond to DNT browser signals or mechanisms.

8. Third-party technologies

Depending on the page and your choices, third parties may include:

• Sentry (optional analytics consent)—error monitoring
• Stripe—billing and payment methods
• hCaptcha—human verification on selected forms
• Social networks—when you start OAuth, their cookies and policies apply on their domains

We do not use third-party advertising cookies on the core app for profiling. Review each vendor’s policy for detail beyond what we control.

9. Updates to This Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by:

• Posting the updated Cookie Policy on this page
• Updating the "Last updated" date
• Displaying a prominent notice on the Service
• Sending you an email notification (if you have provided an email address)

We encourage you to review this Cookie Policy periodically to stay informed about our use of cookies.

10. European Users (ePrivacy Directive)

If you are located in the European Union, the ePrivacy Directive requires us to obtain your consent before placing non-essential cookies on your device. We comply with this requirement by:

• Requesting your consent before placing non-essential cookies
• Providing clear information about the cookies we use
• Allowing you to withdraw your consent at any time
• Only placing essential cookies without consent (as they are necessary for the Service to function)

11. Contact Us

If you have any questions about our use of cookies or this Cookie Policy in connection with PostShuttle, contact us at: