कुकी नीति

Cookies are small files stored on your device by your browser. We use a small number of cookies and similar technologies to keep you signed in, keep the platform secure, and — only if you agree — to understand how our public website and application are used so we can improve them.

Analytics are off until you turn them on. When you first visit, we ask whether you consent to analytics cookies, and nothing optional loads until you choose. Essential cookies are not optional, because sign-in cannot work without them.

You can change your mind at any time, and your choice is remembered for six months:

Essential (always on)

We use cookies to sign you in and maintain your session. Our authentication provider (Supabase) sets and rotates these cookies as your session refreshes. We also store your language choice and your response to this cookie notice. These are necessary for the platform to work and cannot be turned off without breaking sign-in.

Performance measurement (always on, no cookies set)

In production we use Vercel Analytics and Vercel Speed Insights to measure aggregate traffic and page performance. Both are cookieless, collect no cross-site identifier, and build no advertising profile, so they run without a consent prompt.

Analytics (only with your consent)

If you consent to analytics, we load the following. Each is limited to particular parts of the service, and those limits are enforced in our code, not merely by policy:

• Google Analytics 4, via a Google Tag Manager container — on our public website only. Used to understand where visitors come from and which pages help them. This sets Google Analytics cookies.
• PostHog (EU region) — on our public website and inside the signed-in application. Used for aggregate product analytics, such as how many organisations reach a given feature. We disable automatic interaction capture, so it records page paths and named events, not page content. Delivered through our own domain so it works on corporate networks; this changes only how the data travels, not what is collected or who processes it.
• PostHog session replay and heatmaps — on our public marketing pages only, to understand how visitors move through those pages. This is never active on the signed-in application, the simulation runner, or embedded simulations, and recording stops the moment you move from our public website into the platform. Anything you type into a form is masked and never recorded.

What we never do

We do not use advertising or remarketing cookies, and we do not sell personal information. No analytics or session-replay technology is loaded on the simulation runner or on embedded simulations, so your practice conversations, transcripts and feedback are never captured by an analytics provider — this is enforced in our application code, not merely by configuration. Our error-monitoring provider (Sentry) is separately configured to strip transcripts, prompts, audio, email addresses and credentials before anything is sent.

Preferences

We store lightweight preferences (such as theme and language) so the interface behaves the way you expect between visits.

Regardless of your analytics choice, we monitor application errors so we can keep the service working and secure. This records the fact that an error happened, where in the code it happened, and an opaque account identifier — never your conversation content. We rely on our legitimate interest in operating a reliable, secure platform for this, and it is not used to analyse your behaviour or to market to you.

You can change your analytics choice above at any time. You can also control or delete cookies through your browser settings, though blocking essential authentication cookies will prevent you from signing in. Because we use no advertising cookies, there is no ad-tracking to opt out of.

If your organisation requires that no third-party analytics run at all for your users, contact us — the platform supports switching every optional analytics provider off for a deployment.

For how cookie and analytics data fits into our broader handling of personal information, see our Privacy Policy. Questions about this policy can be sent to privacy@evolvesimulations.com.