Cookies Policy

1. What Are Cookies?

Cookies are small text files placed on your device (computer, smartphone, or tablet) when you visit a website. They are used to make websites work correctly, remember your preferences, and provide information to site operators. Cookies may be set by the website you are visiting (first-party cookies) or by third-party services (third-party cookies).

Session cookies expire when you close your browser; persistent cookies remain on your device for a defined period. References to “cookies” in this policy include similar technologies such as local storage, session storage, and web beacons.

2. Types of Cookies We Use

2.1 Essential / Necessary Cookies

These cookies are strictly necessary for the platform to function. They cannot be disabled. No consent is required under GDPR for essential cookies.

• Session management: Supabase authentication cookies that maintain your logged-in session and manage user identity across requests.
• Security tokens: CSRF protection tokens and signed session identifiers that protect against cross-site request forgery and session hijacking.
• Rate limiting: Upstash Redis processes your IP address to enforce rate limits (maximum 15 authentication attempts per 15-minute window per IP address), protecting the platform from brute-force attacks.

2.2 Analytics Cookies

Analytics cookies help us understand how visitors use NotNoise, identify improvement areas, and measure the effectiveness of new features. These cookies require your consent and are disabled by default until you accept them.

• Provider: PostHog (posthog.com)
• Purpose: Session recording, heatmap analysis, funnel tracking, feature flag delivery, and A/B testing.
• Data storage: PostHog data is stored in the European Union.
• Duration: Up to 12 months.
• Legal basis: Consent (GDPR Art. 6(1)(a)).

2.3 Marketing / Advertising Cookies

Marketing cookies are used for conversion measurement and retargeting for NotNoise's own marketing campaigns. They require your consent and are disabled by default.

Important: Smart Ads campaigns run by NotNoise on your behalf use NotNoise's own Meta Business Manager account and do not involve cookies set on your device for advertising purposes.

• Provider: Meta (facebook.com) — Meta Pixel and Meta Conversions API (CAPI)
• Purpose: Conversion measurement, audience matching, and retargeting for NotNoise's own marketing. CAPI supplements Pixel data with server-side event matching.
• Duration: Up to 90 days.
• Legal basis: Consent (GDPR Art. 6(1)(a)); constitutes “sharing” under CCPA/CPRA for California users.

2.4 Preference Cookies

Preference cookies remember your choices and personalise your experience on NotNoise.

• UI settings: Theme preferences (light/dark mode), language settings, and other display preferences. Duration: 1 year.
• Cookie consent record: Records your consent choices and the timestamp of consent, as required by GDPR. Duration: 1 year.

3. Cookie Duration Reference

4. How We Obtain and Manage Consent

When you first visit notnoise.co, a cookie consent banner is displayed that allows you to:

• Accept all cookies: Consent to essential, analytics, marketing, and preference cookies.
• Reject all non-essential cookies: Only essential cookies are set.
• Customise your preferences: Accept or reject each category individually.

Your consent choice is recorded with a timestamp and stored in a preference cookie for up to 1 year. You may change your consent preferences at any time by clicking the “Manage Cookies” button in the website footer. Withdrawing consent will disable the relevant cookies going forward; it does not affect data already collected while consent was given.

For California residents: You may opt out of the “sharing” of personal information for cross-context behavioral advertising by rejecting marketing cookies or by contacting hello@notnoise.co.

5. How to Manage Cookies via Your Browser

In addition to our consent tool, you can control and delete cookies through your browser settings. Note that disabling cookies may affect the functionality of NotNoise.

• Google Chrome: Settings > Privacy and security > Cookies and other site data
• Mozilla Firefox: Settings > Privacy and Security > Cookies and Site Data
• Apple Safari: Preferences > Privacy > Manage Website Data
• Microsoft Edge: Settings > Cookies and site permissions

6. Third-Party Cookies

PostHog and Meta set their own cookies on notnoise.co pages when you consent to analytics and marketing cookies respectively.

• PostHog: posthog.com/privacy
• Meta / Facebook: facebook.com/privacy/policy

These third parties may combine data collected on NotNoise with data from other websites where their tracking tools are deployed, subject to your consent choices.

7. International Transfers

PostHog stores analytics data in the European Union. Meta is a US-based company. When you consent to marketing cookies, data may be transferred to Meta's servers in the United States. Such transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission, or the EU-US Data Privacy Framework where applicable.

8. Changes to This Policy

We may update this Cookies Policy to reflect changes in technology, regulation, or our cookie usage. When we make material changes, we will notify you by a prominent notice on our website. We may also re-request your consent if our cookie categories change materially.

9. Contact

For questions about our use of cookies:

• Email: hello@notnoise.co
• Postal address: Ezequiel de la Parra, C/ Fernando Poo 5, 3o Izq, 28045 Madrid, Spain