Cookie Policy

Cookies & Tracking

Last Updated: The 24th of June 2026 · Effective Date: The 1st of December 2025

We use cookies and similar tech to keep the site functional and secure the waitlist, and — with your consent — to measure usage and improve the experience (including product analytics and privacy-masked session replay). We do not use advertising, ad-profiling, or third-party cross-site tracking cookies.

1. Types of cookies

Strictly Necessary

Required for bot protection (Turnstile), CDN/security (Cloudflare/Vercel), rate limits, and secure submissions. Cannot be disabled.

Analytics (Google Analytics 4 & PostHog)

Set only with your consent, to understand site usage and improve the experience — including product analytics, heatmaps, and session replay (a privacy-masked recording of on-page interactions; form inputs are masked). No ads, remarketing, or demographic profiling. GA4 (_ga / _ga_*) is set by Google (US); PostHog (ph_*) is hosted in the EU. Also only with this consent: first-touch attribution — how you first arrived (the referring site, UTM values, the page you landed on, and whether an ad click was involved; no identifier) — kept in local storage (chessbit_first_touch_v1) and in a first-party cookie, cb_ft, shared with app.chessbit.io so a later sign-up can be attributed to it (180 days). Choosing essential-only deletes both. Separately, Vercel Web Analytics counts page views in aggregate without setting any cookie or storing any identifier on your device, so it runs independently of this consent.

Functional (minimal)

First-party local storage on chessbit.io: your cookie choice (chessbit_cookie_consent_v1), and waitlist submission state and resend timers. It does not track you across other sites.

2. Providers

  • Cloudflare: security, Turnstile, CDN
  • Google (United States): Google Analytics 4 & Google Tag Manager — analytics, consent-based
  • PostHog (EU-hosted): product analytics, heatmaps & session replay, consent-based
  • Vercel & Render: hosting/infrastructure
  • MongoDB Atlas: database (no cookies)
  • Mailtrap: email delivery (no cookies)

3. What we do NOT use

No advertising, retargeting, ad/marketing profiling, third-party or cross-site tracking, gambling, or monetization cookies. Our analytics — including session replay — are first-party and used only to understand and improve this Site.

4. Legal basis (GDPR)

Legitimate interest for security/essential operations; consent for analytics (opt-in, withdraw anytime).

5. Manage cookies

Use the “Cookie settings” button at the bottom of the page to allow or withdraw analytics consent at any time (this controls both Google Analytics and PostHog). You can also use your browser settings to block/delete cookies, or the Google opt-out add-on for GA. Blocking essential cookies may affect functionality.

6. Turnstile

Cloudflare Turnstile provides privacy-first bot protection and does not use tracking cookies; it collects minimal browser interaction data to verify you are human.

7. Updates & Contact

We may update this Cookie Policy; changes appear here with a new date. Contact: info@chessbit.io