Cookie Policy

Two cookies are needed for the product to work at all: one keeps you logged in, one remembers whether you picked light or dark. Everything else is measurement — knowing which ads bring contractors here — and you can switch it off without breaking anything. No data brokers, no cross-site tracking networks, nothing sold to anyone.

If you’re in the EU, the UK or Switzerland, nothing in the measurement group runs until you say yes. Everywhere else it runs unless you turn it off — here:

• Login session — a secure, HTTP-only cookie from our auth provider (Supabase) that keeps you signed in. The app can’t work without it.
• Theme preference — kept in your browser’s local storage, never sent to a server, so the app remembers light or dark mode.
• Your cookie choice — also local storage. We have to remember a “no” in order to honour it.

• Google Analytics (GA4) — which pages people read and which ones lead to a signup. Set by Google.
• Google Ads conversion tag — counts that an ad led to a signup. It measures the ad, not you.
• Meta Pixel — the same job for Facebook and Instagram ads. Set by Meta.

Turn these down and the Google tags switch to a mode that counts a visit without storing anything on your device; the Meta Pixel isn’t loaded at all.

Our day-to-day page analytics — Umami and Vercel Analytics — set and read nothing on your device and build no profile of you, which is why they aren’t in the permission group above and why we chose them.

When a contractor sends you an estimate to sign, or you fill in their storm-damage lead form, that page carries no advertising or analytics tags whatsoever — no Google tag, no pixel, no banner to dismiss. You came to sign a document, not to be measured.

You can clear or block cookies in your browser settings at any time. Blocking the session cookie will log you out; blocking the measurement tags changes nothing about how the product works. The full picture of what data we hold and why is in the privacy policy.