Cookie Policy
Working version
This is the current working version of this page. It says what we actually do, in plain English, and it's in final review before launch. If anything material changes, existing users will be told by email — never by a silent edit.
The short version: essential cookies keep the site working. Analytics (PostHog) and advertising measurement (Google Ads, Meta, and OpenAI Ads) only run if you choose Accept all in the banner. When you arrive from one of our ads on another platform, that platform may also set its own cookies. Essential-only visitors still get a working site; Google may receive cookieless measurement pings under Consent Mode v2, without ads cookies. OpenAI is an independent controller for ChatGPT Ads measurement data, not our processor. This policy covers both chewbr.net (this site) and chewbr.app (the app).
1. Essential — always on
These make the site and app work. They can't be switched off, because nothing works without them.
| Cookie | What it does | Lasts |
|---|---|---|
| __Secure-next-auth.session-token | Keeps you signed in to the app | 30 days |
| next-auth.csrf-token | Security — blocks forged requests | While your browser's open |
| chewbr-cookie-consent | Remembers your cookie choice, so the banner leaves you alone (stored in your browser's local storage — it never leaves your device) | Until you clear it |
| __stripe_mid / __stripe_sid | Stripe's fraud prevention during checkout | 1 year / 30 minutes |
2. Analytics — only with your consent
If you accept in the banner, PostHog (hosted on EU servers) sets cookies so we can see which features get used and where people get stuck. That's the whole job: improving the product. Never sold. Say no, and the product works exactly the same — you lose nothing.
| Cookie | What it does | Lasts |
|---|---|---|
| ph_* (PostHog) | Product analytics | 12 months |
3. Advertising measurement — only with your consent
We advertise Chewbr on other platforms. If you accept in the banner, the Google tag (gtag.js) may set Google Ads cookies so we can measure whether ads led to a signup or purchase. The same consent choice loads the Meta Pixel (PageView and Lead events) and the OpenAI Ads Measurement Pixel (ChatGPT Ads). When you arrive from an ad, the platform you came from may also set its own cookies. We use Google Consent Mode v2: until you accept, ads storage stays denied. Choosing Essential only keeps ads cookies off on this site.
Until you accept, the OpenAI pixel is initialised with measurement consent denied and does not send conversion events. OpenAI is an independent controller for that measurement data — not Chewbr’s processor — and processes it under OpenAI’s own privacy policy. With advanced matching, hashed form details may be sent to OpenAI for attribution.
| Cookie | What it does | Lasts |
|---|---|---|
| _gcl_* / related Google Ads cookies | Ad click and conversion measurement | Up to 90 days (Google-controlled) |
| _fbp / _fbc / related Meta cookies | Meta Pixel PageView and Lead measurement after advertising consent | Up to 90 days (Meta-controlled) |
| __oppref | OpenAI Ads click reference (oppref) so later conversions can be attributed after a ChatGPT ad click | OpenAI-controlled |
4. Preferences
Small conveniences — like the monthly/annual toggle on the pricing page — live in your browser's local storage and stay on your device. They're not tracking, and they never leave your browser.
5. Changing your mind
The banner appears on your first visit: accept all or essential only. Change your choice anytime via Cookie settings in the footer — or clear your browser's cookies and site data for chewbr.net and chewbr.app and choose fresh.
6. Questions
chris@chewbr.net. Chris reads everything.
Last updated: 30 July 2026 — pre-launch working version.
Trading as: Currently CRS Store Ltd; will be assigned to Chewbr Ltd on incorporation.