Cookie policy

1. What are cookies and browser storage?

Cookies are small files stored by your browser. Local storage and session storage also remember information on your device. This policy covers these technologies, including those used by our authentication and payment providers.

2. Necessary storage

Authentication cookies and browser storage maintain your sign-in session and support secure account access. Blocking or clearing them can sign you out or prevent protected pages from working. Their lifetime depends on your session and the authentication provider.

We remember your optional analytics choice in local storage under mgo-analytics-consent-v2. The app accepts that choice for up to 180 days before asking again. Clearing browser storage removes the saved choice.

3. Cookies and storage we use

• MyGroupOrders: Necessary

  mgo-analytics-consent-v2

  Local storage. Remembers your cookie preferences. We ask again after 180 days.

  Duration: Valid for 180 days, or until you clear site data.

• PostHog: Necessary

  __ph_opt_in_out_<PostHog project key>

  Local storage, with a cookie fallback if unavailable. Remembers whether PostHog collection is allowed or denied. Created after analytics is first enabled; it contains a consent flag, not a browser identifier.

  Duration: Local storage: until you clear site data. Fallback cookie: up to 365 days.

• Convex Auth: Necessary

  __Host-__convexAuthJWT, __Host-__convexAuthRefreshToken, __Host-__convexAuthOAuthVerifier

  Cookies and __convexAuth* local storage. Keeps you signed in and secures sign-in. Cookie names omit __Host- on localhost; local storage names include the backend URL.

  Duration: Cookies: browser session. Local storage: until sign-out or clearing site data; sign-in verifier is removed after use.

• PostHog: Analytics

  ph_mgo_analytics and ph_mgo_analytics_*

  Local and session storage, with a cookie fallback if unavailable. Stores a random browser identifier and session information for analytics. Session Replay uses the same identifiers when you allow it.

  Duration: Local storage: until withdrawal or clearing site data. Session storage: until the tab closes. Fallback cookie: up to 365 days, removed on withdrawal.

• Cloudflare Turnstile protects the interest form and may use a cf_clearance security cookie if pre-clearance is configured. Its lifetime follows the Cloudflare security settings. Stripe and Google set their own security and sign-in storage when you visit their services.

4. Optional analytics and recordings

When configured, PostHog starts only after you allow analytics. It stores a random browser identifier in local storage using the mgo_analytics persistence name. We use page categories and selected actions to understand how people use the app. We do not link this identifier to your account or send your name, email, address, order contents or payment details. Analytics also include technical error reports with error categories, compiled code locations and page categories, with raw messages and personal details removed.

Session Replay records clicks, scrolling and page changes to help us find usability problems. It requires both analytics and recording permission. Allow all includes both; Choose cookies lets you allow analytics alone. Recordings cover only the landing page and Explore, with text and inputs masked. Private workspace, sign-in, account and checkout pages are excluded. Our current integration does not use advertising or affiliate tracking cookies.

PostHog storage is cleared when you reject analytics. Information already sent follows the configured project retention settings. The privacy policy explains the data involved.

5. Your choices

Use Allow all to permit all available optional categories, Deny all to keep necessary storage only, or Choose cookies to make a selection. Save preferences applies your selection; Go back discards unsaved changes. Use Cookie settings in the footer or the on-screen button to change your recording choice at any time. Rejecting optional analytics does not affect your account, orders or payments.

Closing the banner gives no permission for optional analytics or recordings. It saves no choice and the banner returns on the next page load. Cookie settings remains available to make a choice.

You can also clear or block cookies and site data through your browser settings. This may affect sign-in. Removing browser storage can cause the app to ask for your choice again.

6. Payment and sign-in providers

If you choose Stripe checkout or Google sign-in, you visit services that may use their own cookies and storage for security and authentication. Read their notices on those services.

7. Changes and questions

We update this policy when our storage or providers change. The date above identifies the current notice. Contact support if you want details about storage used on your browser.