Your choice, clearly.

What we use

Authentication storage

Supabase authentication uses secure session storage so you can sign in, remain signed in and access only your own workspace. This is essential to provide the account you request.

Optional analytics

After acceptance, first-party cookies store a random visitor ID (toggled_analytics_visitor) and approved traffic-source and UTM campaign labels (toggled_analytics_source) for up to 180 days. After sign-in, an HttpOnly account marker (toggled_analytics_account) prevents different accounts sharing an analytics identity. The essential toggled_analytics_consent cookie remembers your timestamped choice for 180 days. No analytics local storage is used.

PostHog receives safe page categories, source categories, approved campaigns, CTA clicks and confirmed milestones. Once signed in with a confirmed email, events use your Supabase account ID. We do not send email addresses, names, clinic or patient content, photos, prompts, captions, Brand DNA, input values or full URLs. Session recording, heatmaps and automatic interaction capture are disabled.

Device preferences

Toggled stores small preferences on your device, such as whether you have completed an onboarding tour. These preferences improve the interface and do not follow you around other websites.

Your controls

Declining removes analytics cookies and stops future collection. For a signed-in account it also cancels unsent account events. Previously collected events are not automatically deleted; contact us to request deletion. Settings are available when analytics are configured.

You can remove stored information using your browser settings. Removing essential authentication storage will sign you out, and removing preferences may cause onboarding guidance to appear again.

Changes

We will update this page if the technology or purpose changes. Questions can be sent to hello@trytoggled.com.