Cookie Policy

Last updated: 4 September 2026

This Cookie Policy explains how uetr.ai ("we", "us") uses cookies and similar technologies. It supplements our Privacy Policy and is intended to reflect the ePrivacy framework (Lei n.º 41/2004, of 18 August, as amended) and the GDPR.

What are cookies?

Cookies are small text files stored in your browser. We also use similar browser storage technologies. They let the Service remember you between requests, keep you signed in, and, with your consent, measure how the Service is used.

The category tables below list storage by service, purpose, and typical duration. The additional first-party table lists storage by party and duration. Last verified: 8 September 2026. Checkout uses Stripe's own script and cookies under Stripe's cookie policy.

Strictly necessary (always on)

Required to run the Service: sign-in, security, your saved choices, and checkout you explicitly open. Legal basis: strict necessity under Lei n.º 41/2004 Art. 5(2) and GDPR Art. 6(1)(b) and 6(1)(f).

Sign-in storage

Provider: uetr.ai using Supabase
Party: First party
Purpose: Keeps you signed in.
Duration: Until sign-out or token expiry

Service preference and session storage

Provider: uetr.ai
Party: First party
Purpose: Remembers your privacy choices and the session state needed for requested tracking, alerts, and account features.
Duration: Browser session or until you change the choice or delete the storage

Security cookie

Provider: Cloudflare, Inc.
Party: First party
Purpose: Bot mitigation and site security.
Duration: Typically 30 minutes

Checkout storage

Provider: Stripe
Party: Third party
Purpose: Runs and protects checkout when you open it.
Duration: Set by Stripe under its cookie policy

Storage	Provider	Party	Purpose	Duration
Sign-in storage	uetr.ai using Supabase	First party	Keeps you signed in.	Until sign-out or token expiry
Service preference and session storage	uetr.ai	First party	Remembers your privacy choices and the session state needed for requested tracking, alerts, and account features.	Browser session or until you change the choice or delete the storage
Security cookie	Cloudflare, Inc.	First party	Bot mitigation and site security.	Typically 30 minutes
Checkout storage	Stripe	Third party	Runs and protects checkout when you open it.	Set by Stripe under its cookie policy

Additional first-party storage

__dpl cookie

Party: First party
Duration: 24 hours

Storage	Party	Duration
__dpl cookie	First party	24 hours

Analytics (off by default)

Usage statistics for uetr.ai only. Set only if you accept the analytics category (GDPR Art. 6(1)(a)); you can withdraw at any time. We use PostHog for product analytics, Google Analytics 4 for site analytics, and Microsoft Clarity for heatmaps and session replay. Clarity records interactions such as clicks and scrolls, and masks input fields. See the Privacy Policy for details and for how Google uses information from sites or apps that use our services.

Test-session storage

Provider: uetr.ai
Party: First party
Purpose: Keeps consented testing activity separate from site usage statistics.
Duration: Browser session

Product analytics storage

Provider: PostHog, Inc. (EU-hosted project)
Party: First party
Purpose: Consented product usage and funnel measurement for uetr.ai.
Duration: Browser session to 12 months

Site analytics cookies

Provider: Google Analytics 4 (Google Ireland Limited)
Party: First party
Purpose: Consented site usage measurement.
Duration: Typically 13 months

Session-replay cookies

Provider: Microsoft Clarity (Microsoft Ireland Operations Limited)
Party: First party
Purpose: Consented heatmaps and session replay; input fields are masked.
Duration: Typically 1 day to 12 months

Storage	Provider	Party	Purpose	Duration
Test-session storage	uetr.ai	First party	Keeps consented testing activity separate from site usage statistics.	Browser session
Product analytics storage	PostHog, Inc. (EU-hosted project)	First party	Consented product usage and funnel measurement for uetr.ai.	Browser session to 12 months
Site analytics cookies	Google Analytics 4 (Google Ireland Limited)	First party	Consented site usage measurement.	Typically 13 months
Session-replay cookies	Microsoft Clarity (Microsoft Ireland Operations Limited)	First party	Consented heatmaps and session replay; input fields are masked.	Typically 1 day to 12 months

Marketing (off by default)

Campaign effectiveness measurement. Set only if you accept the marketing category (GDPR Art. 6(1)(a)). These are Microsoft advertising identifiers set on Microsoft's own domains; Google's advertising storage stays denied unless you accept this category.

Campaign measurement cookies

Provider: Microsoft (bing.com and clarity.ms domains)
Party: Third party
Purpose: Consented Microsoft campaign measurement identifiers.
Duration: Browser session to 13 months

Storage	Provider	Party	Purpose	Duration
Campaign measurement cookies	Microsoft (bing.com and clarity.ms domains)	Third party	Consented Microsoft campaign measurement identifiers.	Browser session to 13 months

Cookie-free measurement

Separately from the storage groups above, limited product measurement is on by default unless you object. Cloudflare and PostHog EU process limited service-use data that may include the IP address, user agent, site hostname, and page or action. The data excludes email addresses, UETRs, and account identifiers. We use it only to understand and improve the Service, not for advertising or cross-site tracking. Our GDPR basis is legitimate interest (Art. 6(1)(f)), and retention follows the criteria in section 4 of the Privacy Policy. You can object here:

Checking your current choice...

Your choices

You can accept all, reject all, or pick categories from the banner that appears on first visit. Reject all, or saving Analytics off, also objects to cookie-free measurement in this browser. The separate control above lets you resume or object to that tier without changing your optional-cookie consent. You can change your choice at any time:

We also honour the Global Privacy Control signal: while your browser sends it, cookie-free measurement stays off without any further step from you.

You can also block or delete cookies directly in your browser. Doing so may break parts of the Service that rely on strictly-necessary cookies (such as signing in).

Supervisory authority

Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt.