Cookie Policy
Last updated: 14 June 2026
VenuePitch uses cookies and similar technologies (localStorage, session tokens) to make the service work and to understand how it's used. This policy explains what we set, why, and how you can control them.
1. Strictly necessary — always on
These cookies are required for the service to function. You cannot disable them without breaking core functionality (login, checkout, security).
- Supabase auth cookies (
sb-*) — keeps you logged in. First-party. Session + long-lived refresh token. - CSRF / CORS tokens — protect against forged requests.
- Cookie consent record (
vp-cookie-consent) — remembers your choice on this banner so we don't ask you again.
2. Analytics — off by default, opt-in
Only set if you accept analytics cookies via the banner:
- PostHog (
ph_*) — product analytics. Tracks feature usage in aggregate. EU-hosted. No cross-site tracking.
You can withdraw consent at any time — see Section 4.
3. Third-party
- Stripe — sets its own cookies during checkout for fraud prevention. Governed by Stripe's privacy policy.
4. Managing your preferences
- On-site: click “Manage cookies” in the footer to reopen the consent banner.
- Browser: most browsers let you block or delete cookies. See your browser's help pages for instructions. Blocking strictly-necessary cookies will prevent you from logging in.
- Do Not Track: we honour Global Privacy Control (GPC) signals. If your browser sends GPC, we won't load analytics regardless of banner consent.
5. Contact
Questions about cookies? Email hello@venuepitch.com.