Cookie & Tracking Policy

The short version

• Our public website uses privacy-friendly, cookieless analytics. It sets no analytics or advertising cookies.
• We do not use advertising networks, marketing pixels, session-replay tools, or cross-site trackers.
• We do not sell or share your personal information, and we don't use tracking technologies that read the content of your communications.
• When you sign in to the Poppins app, we use a small number of strictly necessary first-party cookies to keep you logged in and to protect the forms you submit.

1. What is a cookie?

A cookie is a small text file that a website can store on your device. Cookies are widely used to make websites work, to remember your preferences, and to gather analytics. Similar technologies (such as local storage) can be used for the same purposes. This policy covers cookies and those similar technologies together.

2. Analytics on our website

We use Fathom Analytics to understand, in aggregate, how many people visit our site and which pages are popular. We chose Fathom specifically because it is designed to be privacy-first:

• It does not set cookies and does not store or use any personal data.
• It does not fingerprint you or track you across other websites.
• The data is aggregated and anonymised, so it can't be used to identify you.

Because Fathom is cookieless and collects no personal data, it does not require a consent banner under the ePrivacy rules or the California privacy laws described below. We disclose it here in the interest of transparency.

How to opt out of analytics

Since our analytics never identify you, there is nothing personal to opt out of. If you would still prefer not to be counted, you can:

• Enable your browser's "Do Not Track" or tracking-protection setting;
• Use a content blocker or privacy extension to block cdn.usefathom.com; or
• Use your browser's private/incognito mode.

3. Strictly necessary cookies (the Poppins app)

When you create an account and sign in, the Poppins application sets a small number of first-party cookies that are essential for the service to function. These are not used for advertising or cross-site tracking:

• Session cookie: keeps you signed in as you move between pages.
• CSRF-token cookie: protects the forms you submit against cross-site request forgery.
• Preference storage: remembers choices such as your light or dark appearance setting.

Because these cookies are strictly necessary to deliver a service you have asked for, they do not require consent. If you block them, parts of the app will not work.

4. Third-party services you choose to connect

If you connect an optional integration (for example, Google Calendar), that provider may set its own cookies during the sign-in process, governed by their own policies. We only start this process when you choose to connect the service.

5. Notice for California residents

Under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

• We do not "sell" your personal information, and we do not "share" it for cross-context behavioural advertising, as those terms are defined under California law. Because we do neither, there is no "Do Not Sell or Share My Personal Information" action you need to take — but you are always welcome to contact us.
• We do not use tools that intercept, record, or read the content of your communications with our site (such as session-replay or wiretap-style trackers).
• You may still exercise your California privacy rights — including the right to know, delete, and correct — as described in our Privacy Policy.

6. Changes to this policy

If we change the analytics or cookie technologies we use, we will update this page and the "Last updated" date above. Any new tracking technology that is not strictly necessary would be disclosed here before or when it is introduced.

7. Contact us

If you have questions about how we use cookies or analytics, email us at help@poppinshq.com. You can also read our full Privacy Policy.