Cookie & analytics notice
Effective: July 3, 2026 · Last updated: July 2026
What this covers
How Quarry uses cookies, localStorage, and analytics on joinquarry.com and the Quarry app. This supplements the Privacy Policy.
Strictly necessary
Required for the product to function — there is no opt-out that keeps the Service working.
| Cookie | Purpose | Lifetime | Set by |
|---|---|---|---|
| sb-<project>-auth-token | Login session (Supabase Auth) | Session, refreshed on use | Supabase |
| sb-<project>-auth-token-code-verifier | OAuth code exchange | Minutes | Supabase |
| __act_as_tenant | Operator “view as business” (super-admins only) | 24 hours | Quarry |
| Cloudflare Turnstile tokens | Bot protection on public forms | Short-lived | Cloudflare |
Analytics
We use PostHog for product analytics — which features are used, where users get stuck, and aggregate usage patterns — and for capturing application errors (exception events). PostHog sets identifier cookies (names begin ph_) and may use localStorage. Analytics events are routed through our own domain to our PostHog instance. We use analytics to improve the product, not for advertising; we do not share analytics data with ad networks, and PostHog processes it only on our behalf (see /subprocessors).
You can limit analytics by blocking or deleting ph_-prefixed cookies in your browser; core product function is unaffected. Because events route through our own domain, generic content-blocking extensions may not stop them — cookie controls are the reliable mechanism.
Advertising cookies
None. We run no ad trackers, no Meta Pixel, no Google Ads tags, and no cross-site behavioral advertising.
localStorage
Used for per-tenant UI caching (for example, brand colors and logo, keyed by tenant) so pages render in your brand without flashing. Performance only; it is not transmitted back to our servers as tracking.
Do Not Track / Global Privacy Control
Because we do not sell or share personal information or run cross-site advertising, DNT and GPC signals have nothing to switch off, and we do not alter behavior in response to them. If that ever changes, we will honor applicable signals and update this notice first.
Managing cookies
Block or delete cookies in your browser settings (blocking the strictly-necessary set will break login), or use private browsing to limit persistence to a session.
Changes & contact
We update this notice when our cookie or analytics use changes; material changes follow the Privacy Policy's notice process. Questions: hello@joinquarry.com.