Cookie Policy
Last updated: July 19, 2026
This page lists every cookie and similar technology WriteGap uses. It supplements our Privacy Policy.
1. The short version
We use a small number of cookies that are strictly necessary to run WriteGap — signing you in, remembering which of your sites you are looking at, and remembering your cookie choice. These cannot be switched off, because the service does not work without them.
We use PostHog for optional analytics. It is off until you accept it in the banner — if you reject it, or ignore the banner, it stores nothing on your device and sends us no events. We also use Google Analytics, which is not gated by this banner and runs for all visitors.
We do not use advertising, retargeting, or cross-site tracking cookies, and we do not share cookie data with advertising networks.
2. Strictly necessary
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
sb-* | Supabase Auth (first party) | Keeps you signed in between page loads and refreshes your session token. | Session / until sign-out |
wg_active_site | WriteGap | Remembers which of your sites is currently selected, so every page shows the same one. | 1 year |
wg_consent | WriteGap | Records whether you accepted or rejected analytics, so the banner does not reappear on every page. Also read by our servers so that rejecting stops server-side analytics too. | 1 year |
pub_shopify_state, pub_wpcom_state | WriteGap | Short-lived security tokens used only while you are connecting a Shopify or WordPress.com account. They protect the connection flow against cross-site request forgery. | 10 minutes |
Under UK and EU rules these are exempt from consent: they are either required to deliver a service you have explicitly requested, or they record a legal preference.
3. Analytics
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
ph_* | PostHog (EU region) | Identifies a returning session so we can count how many people use a feature, and where they get stuck. Optional — only set after you press “Accept”. | 1 year |
_ga, _ga_* | Google Analytics | Identifies a returning visitor so we can see overall traffic and which pages get used. Not gated by the cookie banner — set for all visitors. | Up to 2 years |
PostHog is served through our own domain (writegap.com/ingest) and processes data in the EU. We do not use it for advertising and we do not sell the data. Your Google Search Console data is never sent to PostHog or Google Analytics.
Rejecting or ignoring the banner keeps PostHog off — nothing is written to your device and no events reach us from it. Google Analytics is unaffected by this choice.
4. Changing your choice
Open your preferences any time: — the same link is in the footer of every page. Turn analytics on or off and save; the change takes effect immediately, no reload needed.
You can also block or delete cookies entirely in your browser. WriteGap will still work, but you will be signed out on every page load.
5. Not cookies, but worth stating
We mirror your cookie choice into your browser’s localStorage so the banner does not flash on every navigation. When you accept analytics, PostHog also uses localStorage. Nothing else is stored on your device.
6. Contact
Questions about this policy: contact@writegap.com