Short version: we use one cookie to keep you logged in, and analytics cookies only if you accept them. No ad trackers, ever.

Categories

Strictly necessary (always on)

A single HTTP-only session cookie set by our API keeps you signed in. Without it the app can't work, so it's not optional — but it's not used for tracking. No consent is required for strictly-necessary cookies.

Analytics / measurement (consent required)

We use PostHog (self-hosted on our own infrastructure) to understand which features people use, so we can improve them. These cookies are only set after you accept analytics in our consent banner — until then, nothing is captured. We don't sell this data or share it with advertisers.

Advertising / conversion measurement

When we run ads on Microsoft Advertising (Bing), our public marketing site loads Microsoft's UET tag, which sets _uetsid, _uetvid and Microsoft's MUID cookies. Their only purpose is to tell us that an ad click led to a signup, so we don't waste money on ads that don't work. We don't use them to build advertising profiles and we don't sell your data.

This tag is not loaded at all in regions where prior consent is required (the EU/EEA, the UK, Switzerland and other consent-required jurisdictions) — the check runs at our edge before any advertising script loads, and any uncertainty means the tag is skipped. Inside the signed-in app, no advertising cookies are set.

Managing your choice

When you first visit the app you'll see a consent banner. You can accept or decline analytics, and change your mind anytime from the banner or via Settings → Privacy & data → Cookie preferences. We also honor your browser's "Do Not Track" signal.

Contact

Questions: privacy@changeoutfit.app.