Cookie and Tracking Notice
Version 1.0 · In effect from 20 August 2026
In short
Nothing that tracks you runs before you agree to it. Until you choose, analytics stay off — not merely muted — and if you decline or later withdraw, the identifier is deleted from your browser rather than just left unused. The only storage we set without asking is what is strictly needed to sign you in and remember your language.
This summary is for orientation only. The numbered clauses below are what govern.
1. What cookies and similar technologies are
A cookie is a small file a website stores in your browser. We also use two related mechanisms: local storage, which keeps a value in your browser until it is cleared, and session storage, which forgets it when you close the tab. This notice covers all three, and says which of them we set, why, and whether your consent is required first.
2. Strictly necessary — set without consent
These are required for the site to work at all. They do not track you across other websites and are not used for analytics or advertising. We set them without asking because the Service cannot function without them.
- sb-… — authentication cookies set by our authentication provider. They keep you signed in and identify your session. Removing them signs you out.
- NEXT_LOCALE — remembers whether you chose English or Arabic, so the site does not switch language on you between pages.
- cs-consent — local storage holding your own cookie choice. It is what lets us honour a refusal, so it is set whichever way you decide. If it is absent, we treat you as undecided, which means no analytics.
- Cloudflare cookies — set by our infrastructure provider for security, bot protection, and the sign-up challenge that keeps automated abuse out.
3. Analytics — only with your consent
These help us understand which parts of the Service are used and where people get stuck. None of them runs unless you have actively agreed.
- cs_vid — a random visitor identifier, stored for up to 400 days, that lets us tell a returning visitor from a new one. It contains no personal information and is not shared with anyone.
- cs_sid — a session identifier held in session storage that groups the pages you view in one visit. It is forgotten when you close the tab.
- ph_…_posthog — set by PostHog, our product-analytics provider, to record page views and interactions within the Service. PostHog processes this in the United States; see clause 10 of the Privacy and Data Protection Policy.
4. How our consent model works
When you first arrive, we ask. Until you answer, analytics are off — we do not load the analytics library, we do not create an identifier, and we do not record page views. An unanswered banner is treated as a refusal, not as permission.
If you decline, or if you accept and later change your mind, the visitor identifier is deleted from your browser immediately — in every open tab, not just the one you are in. We do not keep an identifier alive while merely declining to send data with it.
You can withdraw consent at any time from the cookie settings in the site footer. You can also block or delete cookies in your browser settings; if you block the strictly necessary ones, you will not be able to sign in.
Where advertising and measurement signals are supported by third-party tags, they default to denied and are only raised to granted if you consent.
5. Questions
If anything on this page does not match what you see in your browser, we want to know: privacy@counterscope.ae.