This Cookie Policy explains how UWmatic ("we", "us", or "our") uses cookies and similar technologies to recognize you when you visit our website at https://uwmatic.com ("Platform"). It explains what these technologies are and why we use them, as well as your rights to control our use of them.

Cookies are small data files that are placed on your computer or mobile device when you visit a website. Cookies are widely used by website owners to make their websites work, or to work more efficiently, as well as to provide reporting information.

Cookies set by the website owner (in this case, UWmatic) are called "first-party cookies". Cookies set by parties other than the website owner are called "third-party cookies". Third-party cookies enable third-party features or functionality to be provided on or through the website (e.g., advertising, interactive content, and analytics). The parties that set these third-party cookies can recognize your computer both when it visits the website in question and also when it visits certain other websites.

We use essential first-party cookies that are required for technical reasons in order for our Platform to operate. These are strictly necessary for authentication and security, and are always active.

We also offer optional analytics cookies, which help us see which features are used so we can improve them. These are set by Google Analytics and PostHog and are off by default. They are not loaded at all unless you accept them, and you can withdraw that choice at any time under Settings → Privacy.

We do not use advertising or marketing cookies, we do not use cookies to track you across other websites, and we do not sell your personal information.

Essential Cookies (always active)

These are strictly necessary to provide our services. They are required for the Platform to function and cannot be disabled without breaking core functionality — most obviously, you could not sign in.

• Authentication cookies: These cookies maintain your logged-in state and ensure secure access to your account through our Supabase authentication system
• Session cookies: These temporary cookies expire when you close your browser and help the Platform remember your actions during a single browsing session
• Security cookies: These cookies help protect against fraudulent logins and unauthorized access to your account, including Google reCAPTCHA, which we use on forms to block automated abuse

Analytics Cookies (off until you accept)

If you accept analytics, we load two providers that tell us which parts of the product get used:

• Google Analytics 4 — aggregate traffic measurement. We have IP anonymization on and Google advertising signals off, so this data is not used for cross-context behavioral advertising.
• PostHog — in-product usage: which pages and features are used, and how long a page is open. It is associated with your account identifier and role, but we do not send it your name or email address.

If you decline, or if you never answer the prompt, neither provider is loaded and neither sets a cookie. If your browser sends a Global Privacy Control or Do Not Track signal, we treat it as a refusal and do not show the prompt at all.

We do not use session recording or screen replay, we do not capture the text you copy, and we do not use advertising, marketing, or social media tracking cookies.

Local Storage

In addition to essential cookies, we use browser local storage to enhance your experience. This includes:

• Property preferences: Remembering your selected property and property type to maintain context as you navigate
• Workflow state: Saving your progress through multi-step processes so you don't lose work if you refresh the page

Local storage data remains on your device and is not transmitted to third parties. You can clear this data at any time through your browser settings.

Your consent choice

The first time you visit, we ask whether you accept analytics cookies. Nothing optional loads before you answer. You can change your answer at any time under Settings → Privacy; turning analytics off stops both providers immediately and clears the cookies they set.

We also honor browser-level opt-out signals. If your browser or an extension sends Global Privacy Control or Do Not Track, analytics stay off, we do not show the prompt, and the signal overrides any earlier choice on that device.

Essential cookies cannot be switched off from within the Platform, because the Platform cannot authenticate you without them. You can still block them in your browser — see below — but you will not be able to sign in.

Browser Controls

You can configure your browser to:

• Alert you when cookies are being sent
• Block all cookies (though this will prevent you from logging in)
• Delete cookies when you close your browser
• Clear existing cookies at any time

Important: Blocking essential cookies will prevent you from accessing secure areas of the Platform, including your account dashboard and property analysis tools. The Platform cannot function properly without these authentication cookies.

Clearing Local Storage

To clear local storage data (which stores your property preferences and workflow state):

• Chrome: Settings → Privacy and security → Clear browsing data → Cookies and other site data
• Firefox: Settings → Privacy & Security → Cookies and Site Data → Clear Data
• Safari: Preferences → Privacy → Manage Website Data → Remove
• Edge: Settings → Privacy, search, and services → Clear browsing data

Do Not Track and Global Privacy Control

We honor both signals. When either is present, no analytics provider is loaded, no consent prompt is shown, and the signal takes precedence over any choice previously stored on that device. Essential authentication cookies are unaffected, as the Platform cannot sign you in without them.

The table below lists all cookies and local storage items currently used by our Platform:

Note: The analytics rows are only present if you have accepted analytics cookies. If you have declined, or not yet answered, those providers are never loaded and set nothing.

Two third parties also receive your IP address and user agent simply because your browser requests resources from them, without setting cookies of their own on our behalf: Google Fonts (typography) and our hosting provider Vercel. Our Subprocessors page lists every third party that receives data from UWmatic.

To be completely transparent about our privacy practices, here's what UWmatic does not use:

• Web beacons or tracking pixels: We do not use invisible images to track your behavior
• Browser fingerprinting: We do not collect information about your browser configuration to identify you
• Cross-site tracking: We do not track your activity across other websites
• Advertising networks: We do not participate in ad networks or retargeting campaigns, and Google advertising signals are disabled on our analytics property
• Social media plugins: We do not embed social media tracking widgets
• Session recording: We do not record or replay your screen, and we do not capture text you copy
• Sale of personal information: We do not sell your personal information

To be precise about the one item that used to appear on this list: we do use third-party product analytics, but only with your consent, and never before you give it. See section 3.

We may update this Cookie Policy from time to time in order to reflect, for example, changes to the cookies we use or for other operational, legal, or regulatory reasons. Please therefore re-visit this Cookie Policy regularly to stay informed about our use of cookies and related technologies.

The date at the top of this Cookie Policy indicates when it was last updated.

If you have any questions about our use of cookies or other technologies, please contact us at:

Email: support@uwmatic.com