Cookies are small text files placed on your device by a website. They are used to remember information about you between visits. This policy covers cookies and similar technologies (local storage, session storage) used across all IntentGuard domains.
Under the EU ePrivacy Directive and GDPR, cookies that are not strictly necessary for a service you have explicitly requested require your prior consent before being set. We take this requirement seriously and have designed our cookie footprint accordingly.
| Domain | Purpose | Consent Required? | Third-Party Cookies? |
|---|---|---|---|
intentguard.dev |
Marketing website. Publicly accessible. | Yes — analytics require consent | Yes — PostHog (EU region, after consent only) |
app.intentguard.dev |
Authenticated product app. Login required. | No — contractual context (see Section 4) | No — strictly necessary only |
admin.intentguard.dev |
Internal admin. No public access. | Not applicable | Not applicable |
These cookies are required for the site to function. They cannot be switched off and do not store personally identifiable information. They are set regardless of your consent choice.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
ig_cookie_consent |
IntentGuard (first-party) | Stores your consent choice (accepted/rejected) so the banner does not re-appear on every visit. | 12 months |
__session |
Vercel / Next.js | Session management for the Next.js application layer. Required for navigation and security. | Session |
We use PostHog for product analytics, hosted in the European Union (eu.posthog.com). PostHog analytics cookies are only set after you explicitly accept analytics cookies via the consent banner on intentguard.dev. If you reject, PostHog will not fire and no analytics data will be collected about your visit.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
ph_* |
PostHog EU | Tracks page views and interaction events. Does not track you across other websites. | 12 months |
posthog_distinct_id |
PostHog EU | Assigns an anonymous identifier for analytics continuity. Not linked to your name or email unless you sign up. | 12 months |
We do not use Google Analytics, Google Tag Manager, Meta Pixel, LinkedIn Insight Tag, Hotjar, or any advertising or retargeting tool on intentguard.dev. There are no advertising cookies or cross-site tracking cookies on any IntentGuard domain.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
sb-*-auth-token |
Supabase EU West | Your authentication session token. Keeps you logged in. Required for the app to function. | 7 days (refreshed on activity) |
ig_active_org |
IntentGuard (first-party) | Stores your currently selected organisation. Required for the org switcher. | Session |
ig_csrf |
IntentGuard (first-party) | CSRF protection token. Security requirement. | Session |
PostHog is loaded on app.intentguard.dev for activation tracking (for example, when you download an audit report). As an authenticated user under a contractual relationship, this falls under legitimate interest (GDPR Article 6(1)(f)). You may opt out at any time via the method described in Section 6.2.
Explicitly absent from all IntentGuard domains:
This list reflects tools currently in use. If additional analytics, marketing, or session recording tools are introduced in future, this Cookie Policy will be updated, a new consent version will be issued, and existing users will be re-prompted before any new cookies are set.
On your first visit to intentguard.dev, a consent banner offers two equally prominent options: Accept All and Reject All. Your choice is stored for 12 months. You may change your choice at any time by clicking the Cookie Policy link in the footer of any page on intentguard.dev and contacting us at [email protected]. Rejecting analytics does not affect your ability to use the site or sign up.
You may opt out of PostHog analytics tracking on any IntentGuard domain at any time by:
intentguard.dev to select Reject All;You can control and delete cookies at browser level. Note that blocking all cookies will prevent app.intentguard.dev from functioning, as session cookies are required to keep you logged in.
If we add new cookies or change our cookie use materially, we will update this policy and its effective date. The "Last updated" date at the top of this page will reflect any change. We will not introduce advertising cookies without updating this policy and seeking fresh consent where required.
Material changes will be communicated to active account holders by email with at least 14 days' notice.
Questions about this policy or to exercise any rights described herein:
Operated by Intouch Prepaid (Pty) Ltd · Registered in South Africa