Cookies.

Your choice stays yours.

When optional analytics is active, you can revisit your choice at any time.

1. Anonymous counting and consent

The anonymous counting described in this section applies to weaselden.app. Kraken’s public pages follow their own rule: if your browser’s time zone is outside Europe, analytics and advertising measurement are on until you decline them; in Europe nothing runs until you allow it; with a Global Privacy Control or Do Not Track signal nothing runs at all. Kraken does not use session replay. Our Privacy Policy describes what Kraken measures and shares.

We use necessary technology to display the consent controls and remember your choice. Cookies, a browser identifier, interaction events, and session replay are off by default and start only when you allow analytics.

If your browser’s time zone is outside Europe, the site counts page views anonymously before you choose and after you decline, using PostHog’s cookieless mode. This stores nothing on your device: no cookie, no local storage, and no browser identifier. PostHog may use the IP address transiently to derive approximate geography, such as country, region, or city, and tells one day’s visits apart with a one-way hash, computed on its servers from the IP address, the browser’s user agent, the site’s hostname, and a salt that changes every day and is then discarded, so the hash cannot be traced back to you or linked across days. The raw IP address is not stored.

If your browser’s time zone is in Europe, including Iceland, Cyprus, the Canary Islands, Madeira, the Azores, Ceuta and Melilla, and the EU’s overseas regions in the Caribbean, South America, and the Indian Ocean, nothing is counted until you allow analytics. If your browser sends a Global Privacy Control or Do Not Track signal, nothing is counted at all.

You can decline optional analytics without losing access to the public site. If you later withdraw consent, cookies, the browser identifier, interaction events, and session replay stop.

2. Technologies we use

The public WeaselDen site currently uses the following categories and providers:

• WeaselDen consent choice, Necessary. Our own consent banner stores your choice in local browser storage under weaselden_consent, together with the date you chose. It sets no cookie and is not sent to us or to any provider. The choice is kept for up to 12 months, after which the banner asks again, or until you clear browser data.
• PostHog cookieless counting, Analytics and anonymous. Outside Europe, page views are counted before a choice and after Decline without storing anything in your browser: no cookie, no local storage, and no browser identifier.
• PostHog, Analytics and optional. After consent, PostHog uses local browser storage for a pseudonymous browser identifier and analytics-consent state. Storage keys may include a project-specific ph_ key and weaselden_posthog_consent. Withdrawing consent resets the analytics identity and leaves an opt-out record where needed to enforce your choice; clearing browser data can also remove these values.
• Analytics identifier lifetime, optional. weaselden_posthog_identity_created_at records when the current company-site analytics identifier began. It contains a timestamp, not your identity, and makes the site replace that identifier after 180 days. Withdrawal removes the timestamp.
• Kraken choices, Necessary. The public Kraken site saves its analytics choice under kraken_public_analytics_consent and its advertising-measurement choice under kraken_public_ad_measurement, each with its date and whether it is the default outside Europe. A choice to keep them lasts up to 180 days; a choice to decline lasts 13 months. A technical analytics consent flag, kraken_public_posthog_consent, may also be stored locally while analytics is on, with a first-party cookie fallback if local storage is blocked. Use Cookie Settings on Kraken to change its choices.
• Kraken measurement, Analytics and advertising. While analytics is on, Kraken uses tab session storage for a random public analytics session and sanitized campaign labels, expiring after 30 minutes of inactivity. While advertising measurement is on, an ad’s click reference is held only in the open page’s memory. Following a link to the Kraken account page carries your choices, that session identifier, campaign labels and any click reference in the link’s fragment, kept in that tab’s session storage until you sign in. None of this holds account identity or form text. Withdrawal removes the session, the SDK flag and any held click reference.
• Campaign measurement, Analytics and optional. After the new campaign-measurement notice is accepted, weaselden_acquisition_v1 may hold the limited campaign context and consented browser identifier in this tab’s session storage for up to 30 minutes. It is removed on withdrawal, a privacy opt-out signal, identity change or expiry. It is not written for declined or cookieless visits.

3. What analytics measures

Anonymous counting, where it runs, sends page views only: the page path without the query string, the referring-site hostname, sanitized campaign tags, and basic browser and device information. Approximate geography may be derived from the IP address, which is not stored.

After you allow Analytics, PostHog may receive:

• Page views using a page path without the query string or URL fragment.
• Approved public interactions: links and controls, sections and pricing, product images, FAQ and demo use, directory filters, search length and result counts. Search text, FAQ text and other form contents are not sent. Loading timings and coarse error categories help diagnose reliability; error messages, stacks and console contents are excluded.
• Browser and device information, approximate geography derived from the visitor IP address, and basic event timing. PostHog discards the raw IP address before storing the event.
• The referring-site hostname and a limited set of sanitized UTM campaign values.

4. What optional analytics excludes

We do not intentionally send names, email addresses, form contents, free text, full query strings, account information, authentication tokens, uploaded files, payment information, private communications, or API request and response bodies to PostHog.

With the analytics notice accepted here and analytics allowed in the Den application, campaign measurement may connect a browser identifier to a pseudonymous Den account identifier and product outcomes. Weasel Estates receives campaign labels without your Den browser or account identifier and asks for independent permission before measuring its own account outcomes. The public site does not create PostHog person profiles; a consenting account application may create a pseudonymous analytics profile. Anonymous counting is never joined to an account and sends no interaction events or session replay.

5. Masked session replay

If you allow Analytics, masked session replay may run on the homepage and the public Tools and Agents pages. Replay helps us understand layout and navigation problems, but it is configured to mask all page text and inputs and to block sensitive elements.

Replay can capture masked page structure and interactions such as clicks or taps, pointer movement, scrolling, navigation, viewport dimensions, and timing. It does not capture readable page text or values entered into inputs.

Replay is disabled on the developer application, portal, legal pages, and any authentication, account, payment, administration, or other sensitive route. We also exclude network headers and bodies, console logs, cross-origin frames, canvas, audio, video, and editable content.

6. Manage your choice

Use Cookie Settings below or in the site footer to allow, decline, or withdraw optional analytics. If your saved choice cannot be read, cookies, the browser identifier, interaction events, and replay stay off; outside Europe, anonymous counting still runs.

You can also clear local storage in your browser. Doing so removes your saved choice, and the banner will ask again. If your browser sends a Do Not Track or Global Privacy Control signal, the site counts nothing, not even anonymously, and does not show the banner, and PostHog honors those signals too.

7. Retention and international processing

Our current PostHog configuration uses its United States hosting region. PostHog may process limited information in the United States or other locations where it operates. Your consent choice stays in your browser for up to 12 months. Under our current PostHog plan, analytics events, including anonymous page views, and masked session replay are retained for no longer than 12 months unless we delete them sooner. Anonymous page views carry no identifier that lasts beyond one day. The pseudonymous browser identifier used after consent may persist for up to 180 days and is reset when analytics consent is withdrawn.

Withdrawing consent stops future analytics collection but does not automatically delete records collected while consent was active. You may contact us about a privacy request, although pseudonymous records may not be reasonably linkable to you.

8. Changes to this policy

We may update this Cookie Policy when our website, providers, or legal obligations change. The date above shows the latest revision. Material changes may also be announced through the site or consent banner.