What Are Cookies?
Cookies are small text files that websites place on your device to remember information about your visit. We also use related technologies like localStorage (browser storage) and authentication tokens. This policy covers all of these.
Cookies and Storage We Use
Essential Cookies and Storage
These are necessary for FaceCutie to function. You cannot opt out of these (the site won't work without them).
- Authentication tokens (localStorage) — when you sign in, we store a secure JWT token in your browser so you stay signed in. This is set by Supabase and is encrypted. Logging out removes it.
- Session preferences (localStorage) — keeps track of which app tab you're on, your cookie consent decision, your share preferences, and other UI state
- Service Worker cache — speeds up the app by caching static files
Authentication Cookies (When You Sign In with Google)
If you choose "Continue with Google," Google sets cookies on its own domain to verify your identity. These cookies are managed by Google, not FaceCutie. We never receive Google's authentication cookies. Google's cookie policy.
Anonymous User Data (localStorage)
If you use FaceCutie without signing in, your skin tracker data, products list, and cookie consent are stored in your browser's local storage. This data:
- Lives only on your device
- Is never transmitted to our servers
- Is permanently lost if you clear browser data
- Is automatically migrated to your account if you later sign in
Analytics Measurement and Optional Cookies
We use Google Analytics 4 and PostHog to understand site usage. These tools may collect:
- Pages you visit and time spent
- How you arrived (search engine, direct, social media)
- Approximate location (country/region only)
- Device type and browser
Google Analytics: The Google tag uses Advanced Consent Mode and starts with analytics storage denied. Before you choose, or if you decline, Google may receive limited cookieless measurements such as page events, consent state, timestamps, browser and device details, and the referring page. Google Analytics does not set or read analytics cookies in this state. If you accept, Google Analytics may use cookies to connect activity into sessions and reports.
PostHog: PostHog website analytics load only after you accept analytics cookies. Session recording remains disabled.
You can also opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on.
Third-Party Cookies
- Google Analytics — limited cookieless measurement while analytics storage is denied; analytics cookies only after consent
- PostHog — page views, referral information, and website interaction events only after consent; session recording is disabled
- MailerLite — may set cookies if you submit our newsletter form
- Amazon — tracks affiliate link referrals when you click product links
Managing Cookies and Stored Data
Through Our Cookie Banner
The first time you visit, you'll see a banner asking to accept or decline cookies. You can change your decision later by clearing your browser's site data for facecutie.com — the banner will reappear.
Through Your Browser
Sign Out
Tap your avatar in the app and select "Sign out" to immediately remove your authentication tokens.
Do Not Track
Some browsers include a "Do Not Track" signal. Our cookie banner provides an explicit choice. If you decline, analytics cookies, PostHog, and Pinterest tracking stay disabled. Google Analytics remains in consent-denied mode and may send limited cookieless measurements.
Changes to This Policy
We may update this Cookie Policy to reflect changes to the technologies we use or legal requirements. We will post the updated policy and change the "Last updated" date. For material changes, we will provide any additional notice or consent choice required by applicable law before the change takes effect.