This Cookie Notice explains how Cartograph uses cookies and similar technologies on its public website and web application. It supplements the Privacy Notice. The public-website controls described below apply to website analytics; authenticated application features have their own necessary session and feature controls.
1. Cookies and similar technologies
Cookies are small files stored by a browser. Similar technologies include local storage, session storage, pixels, SDKs, and identifiers that remember a session or measure use. Some are set by Cartograph and others by providers acting for Cartograph.
2. Categories we use
- Strictly necessary. Authentication, security, load balancing, fraud prevention, consent choices, and functionality you request, such as carrying an email you entered to the next step of a demo request.
- Functional. Choices such as language, display theme, and workspace preferences.
- Optional analytics and performance. Visits, referral and campaign sources, page and content engagement, signup and sign-in link clicks, form progress and submission outcomes, later sales stages and deal value linked to a permitted inquiry, scheduling handoffs, search result counts and selections, downloads, shares, and website performance.
- Application support. In-product support and conversation continuity where the support messenger is enabled.
Cartograph does not use cookies to sell personal information or serve third-party behavioral advertising.
3. Website providers and storage
On the public website, Google Analytics and PostHog provide optional usage analytics. Vercel Analytics and Speed Insights provide optional visit and performance measurement. These optional tools follow the regional choices described below: opt-out analytics for new United States visits, and prior consent elsewhere or when location is unknown. Saved declines and Global Privacy Control always keep optional analytics off. They do not receive entered form values or raw site-search text as analytics event fields. Public-website session recording, Google signals, and advertising personalization are disabled. See how Google uses information from sites and apps that use its services.
| Storage / provider | Purpose and category | Scope and configured lifetime |
|---|---|---|
| cg_consent and cg_consent_version / Cartograph | Necessary: remember your analytics choice and the notice version it covers | cartograph.ai and its subdomains; one year from your choice |
| _ga and _ga_31P8X0F0DM / Google Analytics | Optional analytics: distinguish browsers and sessions | First-party Cartograph cookies; configured for one year, without automatic renewal on a visit |
| ph_*_posthog cookie and local storage / PostHog | Optional analytics: browser identity and usage context | Cartograph domain and browser storage; cookies configured for one year and may renew on activity; local storage remains until cleared or consent is withdrawn |
| cg_funnel_choices / Cartograph local storage | Necessary control for stopping optional sales-outcome measurement linked to an inquiry; contains signed random withdrawal handles, not contact details | Up to 366 days; a pending withdrawal stays until confirmed or expired |
| cg_demo_attribution:* / Cartograph session storage | Optional handoff of a signed inquiry attribution handle between the demo steps | This browser session, or until analytics is declined |
| Vercel Analytics and Speed Insights | Optional analytics and performance: visits and loading performance | No analytics cookie; request and performance information follows the same regional analytics choice |
| cg_campaign_session / Cartograph session storage | Optional analytics: approved campaign source, medium, campaign and random link ID; never the recipient’s identity | This tab only, after analytics is permitted; expires after 30 minutes of inactivity or when the tab session ends; cleared on decline |
| cartograph:demo-lead / Cartograph session storage | Necessary: carry the email, request token, and entry point you supplied to the demo form | This website tab; removed when the form reads it or the tab session ends |
Browser privacy controls may shorten storage lifetimes. Declining analytics or withdrawing consent clears accessible Google Analytics and PostHog cookies and PostHog local storage, plus campaign session storage on this website. The application may use separate storage for its authenticated features. Our hosting and authentication providers also use necessary session and security technologies; application PostHog analytics and Intercom support are separate from this public-website inventory.
Cookie expiry is different from data retention at a provider. Our Google Analytics property is configured to retain event-level and user-level data for fourteen months, without resetting user-data retention on new activity. Those controls do not apply to standard aggregated reports. See the Privacy Notice for other retention criteria and your rights.
4. Your choices
For new visitors whose network location is the United States, optional public-website analytics may run without an opt-in popup unless they decline or enable Global Privacy Control. Outside the United States, or if location cannot be determined, analytics stays off until you accept. Our hosting provider supplies an approximate country from the request; the country is not stored in an analytics-choice cookie, and your language or country selection does not determine this rule. Use Cookie settings in the website footer (or at the bottom of the standalone demo) to enable, decline, or withdraw consent at any time. We preserve saved declines everywhere, including after this regional policy change. Global Privacy Control keeps optional website analytics off without another prompt. When the analytics provider scope materially changes, we request a new choice; an older acceptance does not automatically enable the added providers.
Declining analytics or withdrawing consent stops subsequent optional website analytics collection and clears its accessible analytics persistence. It does not undo processing completed before withdrawal; use the privacy request method in our Privacy Notice to exercise applicable deletion or other rights. You can also block or delete cookies in your browser. Blocking necessary cookies may prevent sign-in or requested functionality. Agreement to the Commercial Terms is not consent to optional cookies.
5. Changes and contact
We update this Notice when our technologies or providers change. Material changes are highlighted through the website or cookie control where required. Questions may be sent to hello@cartograph.ai.