Cookie Policy
Effective version 2026-08-03
Necessary session technology
Rapid Rater uses one first-party HttpOnly session cookie for authentication and CSRF protection. In production it is Secure, SameSite=Lax, and uses a __Host- name. It has a rolling browser lifetime of up to 30 days, while server-side idle and absolute limits can end it sooner. This cookie is necessary and cannot be disabled while signed in.
Consent choice
Your analytics choice and policy version are stored in browser local storage so the service can remember whether optional analytics are allowed. You can change or withdraw this choice from Privacy & analytics settings. A browser sending Global Privacy Control uses necessary-only.
Optional PostHog analytics
When PostHog is enabled, it remains off until you choose Allow analytics. With consent, PostHog may store a first-party cookie and local-storage identifier for up to 180 days and receive page paths and a limited set of product events. Session recording, form text, advertising tracking, and automatic exception capture are disabled.
No advertising trackers
Rapid Rater does not currently use advertising, retargeting, or social-media tracking pixels. New non-essential categories will remain blocked until an applicable consent choice is provided.