Cookie Notice (selfmanager.ai)

1) What are cookies?

Cookies are small text files stored on your device. We also use similar technologies such as local storage. They keep you signed in, secure your account, remember preferences, and — with your permission — help us understand how the app is used.

2) The short version

If you are in the European Economic Area, the United Kingdom or Switzerland, we ask before setting any analytics cookie. Until you choose, no analytics cookies are set and our session-analytics tool is not loaded at all. Everywhere else, analytics is on by default and you can turn it off at any time.

Nothing in your tables, tasks, notes, comments or images is ever sent to an analytics provider. We measure which features get used and where people get stuck — not what you write.

3) Categories we use

• Strictly necessary (always on): sign-in and session management, security, and remembering your cookie choice. The Service cannot work without these, so they are not subject to consent.
• Functional: preferences such as light/dark theme, and our live-chat widget on public pages.
• Analytics (consent-based in the EEA/UK/CH): Google Analytics, Google Ads conversion measurement, and Microsoft Clarity.
• Advertising: none currently. We previously loaded Meta and TikTok advertising pixels; both are disabled. If we run advertising again we will ask for consent first and update this Notice before enabling them.

4) Specific cookies and storage

Strictly necessary

• Firebase Authentication — keeps you signed in. Stored as tokens in your browser's local storage / IndexedDB rather than as cookies.
• sm_cookie_consent_v1 (local storage) — remembers whether you accepted or declined analytics, so we do not ask again. Removing it makes the banner reappear.
• self-manager-theme-light-mode (local storage) — your light/dark choice.

Analytics — only after consent in the EEA/UK/CH

• Google Analytics 4:_ga (2 years) and _ga_<id> (2 years) — distinguish visitors and hold session state.
• Google Ads:_gcl_au (90 days) — attributes a signup or subscription to the ad that led to it.
• Microsoft Clarity:_clck (1 year), _clsk (1 day), CLID (1 year), and Microsoft cookies including MUID, ANONCHK, SM and MR — group your pageviews into a single session and produce heatmaps and session replays.

About session replay: Microsoft Clarity records how pages are used — clicks, scrolling, mouse movement — and can replay that as a video-like session. We never send it the contents of your tables, tasks or notes. If you would rather not be recorded at all, decline analytics (or turn it off later using the footer link) and Clarity is never loaded on your device.

Third parties on their own domains

• Stripe — processes payments and subscriptions. Stripe sets its own cookies (for example __stripe_mid, __stripe_sid) to enable checkout and prevent fraud. These are necessary for payment and are controlled by Stripe.
• Tawk.to — the live-chat widget on our public pages sets cookies so a conversation survives a page change.
• Sign-in providers — Google, Microsoft, Apple, X and Facebook may set cookies on their own domains when you use them to sign in.

Exact names and lifetimes are set by these providers and can change without notice from us.

5) Managing your choices

Change your mind at any time using the Cookie choices link in the footer. Withdrawing is exactly as easy as giving — one click, no forms.

If you decline, we do not set analytics cookies and Clarity is never loaded. Google Analytics remains present in a cookieless mode that reports only aggregate, non-identifying signals and cannot recognise you across visits.

Strictly necessary cookies cannot be switched off, because sign-in and security depend on them.

You can also block or delete cookies in your browser settings, and most browsers offer a "Do Not Track" or global privacy control. Note that blocking necessary cookies will break sign-in.

6) How we decide whether to ask

Two independent mechanisms, so that a wrong guess about your location can never result in tracking you without consent:

• Google determines your country on its own servers and withholds analytics and advertising storage across the EEA, UK and Switzerland until you consent.
• Microsoft Clarity is not loaded by us at all until consent exists.

7) Updates

We will update this Notice whenever our use of cookies changes. If we add a tracker — advertising in particular — we will ask for consent again rather than relying on a choice you made about a different set of cookies.

8) Contact

Questions about cookies? marian@selfmanager.ai