Cookie Policy
The complete list of cookies this site sets, what each one is for, and the choice you have about them.
Last updated: September 7, 2026
The Short Version
Cookies here come in two kinds. Strictly necessary ones keep sign-in, security, and your consent choice working — those are always on. Advertising measurement cookies (Google) and product analytics cookies (PostHog) depend on where you are. In the European Union, the United Kingdom, Iceland, Liechtenstein, Norway and Switzerland they stay off until you say yes in the consent banner, where Accept and Reject sit side by side, one click each. Everywhere else, including the United States, they are on by default and you can opt out at any time: one click from the Cookie Preferences link in the footer, or automatically if your browser sends the Global Privacy Control signal.
What a Cookie Is
A cookie is a small text file a website stores in your browser so it can recognize you between page loads. Without one, you would be logged out on every click.
Strictly Necessary Cookies — Always On
These keep the site functioning and are exempt from consent. Blocking them in your browser breaks sign-in, because staying signed in is what they are for.
| Cookie | Purpose | Lifetime |
|---|---|---|
wordpress_logged_in_* |
Keeps you signed in to your solution seeker or vendor account. | Session, or up to 14 days with "remember me" |
wordpress_sec_* |
Secures authenticated sessions against forgery. | Session, or up to 14 days with "remember me" |
wordpress_test_cookie |
Checks whether your browser accepts cookies at login. | Session |
wp-settings-* |
Remembers interface preferences for signed-in users. | 1 year |
is_consent |
Remembers the cookie choices you made in the consent banner or Preferences, so we do not ask again on every visit. | 180 days |
is_consent_notice |
Outside Europe only: remembers that you closed the cookie notice. It is not a consent record and changes nothing about tracking. | 180 days |
is_geo |
Your country code (two letters, nothing else), so we know which consent rules apply to you without asking our edge network on every page. | 7 days |
__cf_bm |
Set by Cloudflare, which sits in front of this site, to tell humans from bots and protect against abuse. | 30 minutes |
The chat also uses your browser's local storage to hold a short-lived session token so a conversation can continue across page loads. That token identifies your chat session to our engine and nothing else.
One thing that is deliberately NOT on this list: payment cookies. When you buy a pass or credits, checkout happens on Stripe's own hosted page at stripe.com — Stripe sets its fraud-prevention cookies there, on its domain, under its own cookie policy. Our pages never load Stripe's scripts.
Advertising Measurement Cookies — Your Choice
We advertise on Google, and we use Google's tag to measure whether those ads work and to build remarketing audiences. When marketing cookies are on for you — by default outside Europe, or because you accepted them — that tag may set cookies like the ones below. If you opt out, decline, or your browser sends the Global Privacy Control signal, no advertising cookies are set; Google instead receives anonymous, cookieless pings that count ad clicks in aggregate without identifying you.
| Cookie | Purpose | Lifetime |
|---|---|---|
_gcl_* |
Google Ads conversion tracking — connects an ad click to a signup or purchase on this site. | Up to 90 days |
| Google advertising cookies | Remarketing — lets us show follow-up ads on Google to people who visited this site. Set on Google's own domains under Google's policies. | Varies, set by Google |
Analytics Cookies — Your Choice
We use PostHog for product analytics: which pages are used, where people drop out of signup or search, whether a feature is worth keeping. It is first-party measurement of this site, not cross-site tracking, and no data is sold or shared with advertisers. PostHog's script loads on every page and records only while analytics cookies are on for you: by default outside Europe, or after you accept them in the banner. If you opt out or decline, no analytics cookies or storage are set and nothing further is sent. Signed-in solution seekers and vendors are identified by an internal account number only, never by name or email.
| Cookie / storage | Purpose | Lifetime |
|---|---|---|
ph_*_posthog |
PostHog visitor and session identifier, so page views in one visit are counted as one visit. Stored as a cookie and mirrored in local storage. | 1 year |
__ph_opt_in_out_* |
Local storage flag PostHog keeps so it remembers whether you opted in or out of analytics. | Until cleared |
PostHog is hosted in the United States. Session recording is off. We do not use PostHog for advertising or share its data with Google.
What We Still Do Not Set
No social media pixels, no data brokers, no cross-site trackers beyond the Google advertising measurement and PostHog analytics described above — and all of it under your control. Opting out never takes more clicks than opting in, you see on-screen confirmation when you do, and closing a notice is never treated as a yes.
Controlling Cookies
Use the Cookie Preferences link in the footer to review or change your choices at any time — withdrawing consent is as easy as giving it. The "Do Not Sell or Share My Personal Information" link next to it opens the same controls: turning marketing off is the California-law opt-out of sharing, and you will see on-screen confirmation when you do. If your browser sends the Global Privacy Control signal, we honor it automatically: marketing cookies stay off on that device no matter what is stored. And as always, every major browser lets you view, block, or delete cookies in its settings — with the caveat that blocking the strictly necessary ones breaks sign-in.
More Detail
What we do with the data behind the cookies lives in the Privacy Policy.