Cookie Policy

1. Introduction

This Cookie Policy explains how Persoon.ai Inc. ("ShipReady Metrics", "we", or "us") uses cookies and similar technologies on the ShipReady Metrics websites and application ("Service"). It supplements our Privacy Policy, which describes our broader data practices.

A cookie is a small text file stored in your browser. We keep our use deliberately small: a handful of essential cookies that make sign-in and the product work, one cookie that remembers your analytics choice, and — on our public marketing pages only — two analytics tools that load only under the conditions described below.

2. Essential Cookies

These cookies are required for the Service to function — they keep you signed in and remember basic workspace selections. They do not track you across other websites and are not used for advertising.

Cookie	Purpose	Duration
Supabase authentication cookies (names beginning with "sb-")	Set by our authentication layer (Supabase) to keep you securely signed in; they hold your session and are removed on sign-out.	Session-managed by the authentication layer
srm_active_org	Remembers which organization you are working in when your account belongs to more than one (the organization switcher). HttpOnly, same-site.	Up to 1 year
srm_active_unit	Remembers your selected business unit within an organization. HttpOnly, same-site.	Up to 1 year
sr_consent	Stores your analytics consent choice (granted or denied) so we do not ask again and can honor a decline.	180 days

During sign-in and connector setup, short-lived technical cookies may also be set and then discarded — for example, a code-verifier cookie used by the secure OAuth sign-in flow, and an anti-forgery state cookie used while installing the GitHub App integration. These exist only to protect the flow they belong to.

3. Analytics on Public Marketing Pages Only

Two third-party analytics tools may run on our PUBLIC MARKETING PAGES ONLY (the website, pricing, docs, and similar public pages). They are never loaded on authenticated surfaces — your dashboards, reports, and any signed-in page never receive these tags, so confidential tenant data is never session-recorded or sent to an analytics provider.

Provider	What it does	Cookies / data
Google Analytics 4	Aggregate website analytics: page views, referrers, approximate location, device and browser metadata for the marketing site.	Google-set analytics cookies (e.g., names beginning with "_ga"); marketing-site visitor data only.
Microsoft Clarity	Session analytics for the marketing site: heatmaps and interaction recordings (clicks, scrolls) to improve the public pages.	Microsoft-set analytics cookies; marketing-site visitor interaction data only.

Production only: these tags are disabled in preview and development builds.
Consent-gated: when consent is required (our production configuration), the tags load only after you choose "Accept" in the consent banner; before a choice, and after a decline, they do not load at all.
Both providers are disclosed in our Subprocessors document and Privacy Policy.

4. Your Consent Choices

When analytics consent is required, a banner on the marketing pages offers a clear Accept or Decline choice. Declining stores your choice and simply means the analytics tags never load — your access to the site and the Service is never affected either way.

Your choice is stored in the sr_consent cookie for 180 days; after it expires you will be asked again.
To change your mind before then, delete the sr_consent cookie in your browser settings and revisit the site — the banner will reappear. [Owner to confirm: whether to add an in-page control for revisiting the choice.]
You can also block or delete cookies entirely through your browser. Blocking the essential cookies in Section 2 will prevent sign-in from working.

5. What We Do Not Use

For clarity, the following are NOT used anywhere on the Service:

No advertising or ad-network cookies, and no retargeting pixels.
No cross-site tracking of you around the web.
No analytics or session recording on authenticated, signed-in pages.
No sale or sharing of cookie data for advertising purposes.

6. Local Storage

Separately from cookies, your browser's local storage is used to remember your display theme preference (light or dark mode). This value stays in your browser as part of how the page renders and is not used to identify or track you.

7. Changes to This Policy

If we add, remove, or change cookies or analytics providers, we will update this Policy and the Subprocessors document. Material changes to what is collected on the marketing site will be reflected in the consent banner behavior where consent is required.

8. Contact

Questions about cookies or this Policy: info@persooninc.com. Postal contact: Persoon.ai Inc., 525 Randall Ave Ste 100 PMB 228, Cheyenne, WY 82001. This document is an AI-generated draft pending legal and owner review and is not legally binding.