Cookie Policy
Last updated 23 July 2026
Cookies and similar technologies (such as browser local storage) let a website remember your actions and preferences. This policy explains what we use and how you control it. It should be read with our Privacy Policy.
Your choice
We set strictly necessary storage to run the site — this does not require consent. Analytics cookies and session replay run only with your consent and stay off until you opt in. Until you make a choice, we measure visits with anonymous, cookieless analytics that set no cookies, store nothing on your device and are never linked to you (see “Before you choose” below); choosing Reject turns that off too. You can change your choice at any time below; withdrawing consent is as easy as giving it.
Strictly necessary (always on)
These are required for the Service to work and cannot be switched off.
| Name | Type | Purpose |
|---|---|---|
broc-theme | Local storage | Remembers your light/dark theme preference. |
broc-analytics-consent | Local storage & cookie | Remembers your cookie choice so we don't ask again — also set as a cookie shared with app.trybroc.io so your choice applies across the Service. |
| Authentication cookies | Cookie (on app.trybroc.io) | Keep you signed in securely (set by our auth provider, Supabase). |
Before you choose (cookieless, no storage)
Until you make a cookie choice on trybroc.io, we measure visits using PostHog in a cookieless mode: pages viewed, the site that referred you, and campaign tags. It sets no cookies and stores nothing on your device, records no session replay, and is never linked to you — the temporary anonymous identifier only lasts for the page visit and is discarded when you make a choice, so nothing collected before your decision is ever connected to your consented profile or account. Our legal basis is our legitimate interest in aggregate audience measurement (see our Privacy Policy, sections 2 and 3). Choosing Reject stops this measurement entirely.
Analytics cookies and session replay (consent required)
With your consent, we use these to understand how the Service is used so we can improve it. They are not used for advertising and we do not sell the data.
| Provider | What it does | Cookies? |
|---|---|---|
| PostHog (EU Cloud) | Product analytics and session replay — usage patterns, feature use, and masked recordings of page interactions to diagnose problems and improve the Service. | Yes (e.g. a distinct-ID / session cookie); set only after you opt in. |
| Vercel Web Analytics | Aggregate, privacy-friendly visit metrics (if enabled). | Cookie-less by design; runs only when analytics are enabled. |
Our analytics include session replay (PostHog): recordings of on-page interactions used to diagnose problems and improve the Service. To protect your privacy, recordings mask what you type — and in the signed-in product (app.trybroc.io) they also mask all on-screen text — and PostHog hosts the data in the EU. Analytics cookies and replay run only with your consent: on trybroc.io after you opt in above (the same choice carries over to app.trybroc.io), and in the signed-in product only if you opt in — via the optional analytics choice at sign-up or under Settings → Privacy & analytics, where you can change your mind at any time (or email support@trybroc.io).
Managing cookies
Use the control above to turn analytics on or off at any time. You can also block or delete cookies through your browser settings, and most browsers offer a “do not track” or private-browsing mode. Blocking strictly necessary storage may stop parts of the Service working.
Changes
As our tooling evolves we may update this policy and the table above. We will revise the “last updated” date when we do.