Cookie Policy

Last updated: October 12, 2026

Short version

The Goalsforge marketing site sets no marketing or advertising cookies. We use three analytics providers to understand which pages and analyses are most useful. Umami and OpenPanel are cookieless and load on every page.PostHog is consent-gated: it sets cookies and records a Session Replay of the page DOM, and it only starts after you click Accept on the cookie banner. None of the three providers sells data. The only cookies or similar storage we set ourselves are strictly necessary to operate the service (authentication, security) or are used to remember your cookie preference.

What is a cookie?

A cookie is a small text file placed on your device by a website. "Similar technologies" include localStorage, sessionStorage, and pixels. The rules below cover them all.

Cookies we use

1. Strictly necessary

These cookies are required for the service to work. Without them you cannot sign in or use authenticated parts of the product. They do not require consent under Art. 5(3) of the ePrivacy Directive (Directive 2002/58/EC).

  • Session / authentication cookies: set by the Goalsforge web app when you sign in, to keep you signed in across requests. Lifetime: session or up to 30 days depending on the "remember me" choice.
  • Security cookies: used to detect abuse, prevent cross-site request forgery, and rate-limit requests. Lifetime: session or up to 24 hours.

2. Preferences

  • Cookie preference: stored in your browser's localStorage undergf_cookie_consent to remember whether you dismissed or accepted the cookie banner. Lifetime: 12 months. The data is local-only and is not transmitted to any server.

3. Analytics

We use two providers to measure which pages and analyses are most useful. Both are designed to be privacy-respecting and do not require consent under most EU member-state implementations of Art. 5(3) of the ePrivacy Directive, because they do not set tracking cookies.

3a. Umami

Umami is cookieless page-view analytics, loaded from https://cloud.umami.is. It records page views only. Collects: Page URL, referrer, browser name and version, operating system name and version, device type, and the visitor country. All of it anonymised before storage. See theUmami privacy policy.

Where the data is stored: Umami Cloud servers are located in the US and EU, per Umami's own published documentation. Retention: Umami Cloud publishes no deletion schedule. The one retention statement Umami does publish ("data is retained indefinitely unless you manually delete it") is documented for self-hosted installations, which is not the plan we are on. If that ever changes for us, this page changes with it.

3b. OpenPanel

OpenPanel is privacy-first product analytics, loaded from https://openpanel.dev/op1.js. It is the only provider that receives the events below. Collects: page URL, referrer, browser name and version, operating system name and version, device type, and city, country and region derived from the IP address at the moment of the request and then discarded. No IP addresses are stored and no tracking cookies are set. Analytics event data is stored on Hetzner infrastructure in Germany (EU), with backups in Cloudflare R2 within the EU. See theOpenPanel privacy policy.

3c. PostHog (consent-gated)

PostHog is product analytics with Session Replay, loaded from https://eu.i.posthog.com/static/array.js. Unlike Umami and OpenPanel, PostHog sets cookies and records a Session Replay of the page DOM (mouse movement, clicks, scroll position) on consented visits, so it is gated behind the cookie banner: it does not start until you click Accept. If you choose Essential only, PostHog is fully off. Collects:Same per-page fields as Umami and OpenPanel, plus a Session Replay recording of the page DOM (mouse movement, clicks, scroll position), markers around each recording, and a PostHog-managed pseudonymous visitor identifier stored in cookies and localStorage so the same browser is recognised across visits.

Where the data is stored: our PostHog project is configured for the EU region. Every event, page view, and Session Replay recording goes to EU (eu.i.posthog.com).
Retention: PostHog publishes no fixed deletion period for analytics events in the EU region; the page above treats it the same way as Umami and OpenPanel: no fixed period, kept only as long as needed for the purposes in PostHog's own privacy policy.
Replay defaults: on this surface we record mouse movement, clicks, and scroll position only. Form input values, cross-origin iframe contents, and any user-typed text inside iframes are NOT captured. Cookies set by PostHog (a pseudonymous visitor id and a session id) are set only after you accept.
See thePostHog privacy policyand theEU residency documentation.

3d. The complete list of events we collect

This is the full list. We do not collect any analytics event that is not in this table, and if we add one we update this table in the same change (an automated check fails the build otherwise).

Every event below is an anonymous measurement. No email address, name, password, payment detail, or any free text you type is ever sent to a provider. Country and city are derived from your IP address at the moment of the request and are not a stored location history.

  • screen_view
    • Provider: OpenPanel
    • When: Every page, automatically (no cookies set to do it)
    • What is recorded: Page path, page title, referrer, country and city derived from the IP address at the moment of the request, and browser, operating system and device type.
    • Retention: No fixed period: the provider keeps the data only as long as it needs for the purpose described in its own privacy policy.
  • session_start
    • Provider: OpenPanel
    • When: Once at the start of each visit, automatically
    • What is recorded: Same page and device details as a screen view, plus where the visit came from.
    • Retention: No fixed period: the provider keeps the data only as long as it needs for the purpose described in its own privacy policy.
  • session_end
    • Provider: OpenPanel
    • When: Once at the end of each visit, automatically
    • What is recorded: The page the visit ended on, the visit duration, and whether it was treated as a bounce.
    • Retention: No fixed period: the provider keeps the data only as long as it needs for the purpose described in its own privacy policy.
  • cta_click
    • Provider: OpenPanel
    • When: A click on a tracked Register, Login or coverage call to action
    • What is recorded: Which button was clicked, its visible label, where on the page it sits, and the address it points at. No free-text is recorded.
    • Retention: No fixed period: the provider keeps the data only as long as it needs for the purpose described in its own privacy policy.
  • link_out
    • Provider: OpenPanel
    • When: A click that leaves goalsforge.com, for example to app.goalsforge.com
    • What is recorded: The address left for and the link text. Some off-site clicks are recorded twice: once by the provider automatically, and once by us with the button details attached, so raw link_out counts for those clicks are double-counted.
    • Retention: No fixed period: the provider keeps the data only as long as it needs for the purpose described in its own privacy policy.
  • signup_start
    • Provider: OpenPanel
    • When: A click on a tracked call to action that sends you to the registration page
    • What is recorded: The same button details as cta_click, plus which page you were on when you clicked.
    • Retention: No fixed period: the provider keeps the data only as long as it needs for the purpose described in its own privacy policy.
  • signup_start_form
    • Provider: OpenPanel
    • When: The Goalsforge app: the first time you focus a field on the registration form
    • What is recorded: Which form was used (register or login). No field value, no typed text, and no email address is ever recorded.
    • Retention: No fixed period: the provider keeps the data only as long as it needs for the purpose described in its own privacy policy.
  • signup_start_login
    • Provider: OpenPanel
    • When: The Goalsforge app: the first time you focus a field on the sign-in form
    • What is recorded: Which form was used (register or login). No field value, no typed text, and no email address is ever recorded.
    • Retention: No fixed period: the provider keeps the data only as long as it needs for the purpose described in its own privacy policy.
  • signup_complete
    • Provider: OpenPanel
    • When: The Goalsforge app: a registration that finishes successfully
    • What is recorded: Which form was used (register or login). No email address, no password, and no account identifier is ever recorded.
    • Retention: No fixed period: the provider keeps the data only as long as it needs for the purpose described in its own privacy policy.
  • $pageview
    • Provider: PostHog
    • When: After consent, once on every page load
    • What is recorded: Page URL, page title, referrer, browser name and version, operating system name and version, device type, and country, region and city derived from the IP address at the moment of the request and then discarded.
    • Retention: No fixed period: the provider keeps the data only as long as it needs for the purpose described in its own privacy policy.
  • $pageleave
    • Provider: PostHog
    • When: After consent, when you navigate to another page or close the tab
    • What is recorded: The page the visit ended on and how long the page was open. Same browser and IP-derived geography as a page view.
    • Retention: No fixed period: the provider keeps the data only as long as it needs for the purpose described in its own privacy policy.
  • $autocapture
    • Provider: PostHog
    • When: After consent, when you click a tracked element on the page
    • What is recorded: A description of the element that was clicked (its visible text, its type, and where it sits in the page). Form input values, hidden fields, and account details are not captured. Off-site links are recorded with their destination; emails typed into forms are not.
    • Retention: No fixed period: the provider keeps the data only as long as it needs for the purpose described in its own privacy policy.
  • $replay_recording_start
    • Provider: PostHog
    • When: After consent, each time a Session Replay recording begins
    • What is recorded: A marker event marking the start of a recording. The recording itself is sent separately as a stream of small snapshots; see PostHog section 3c below.
    • Retention: No fixed period: the provider keeps the data only as long as it needs for the purpose described in its own privacy policy.
  • $replay_recording_end
    • Provider: PostHog
    • When: After consent, each time a Session Replay recording finishes
    • What is recorded: A marker event marking the end of a recording. The recording length and the page it ended on; the recording payload is sent alongside.
    • Retention: No fixed period: the provider keeps the data only as long as it needs for the purpose described in its own privacy policy.

3e. Identifiers, and what "no personal data" means here

OpenPanel assigns a random, pseudonymous identifier to each browser so that events from one visit can be grouped together. That identifier is not derived from anything about you, and it carries no name, email address, or account reference. It lives with your analytics events only; it is never joined to your Goalsforge account and never used to show you targeted advertising. PostHog assigns a similar pseudonymous visitor id, stored both in cookies and in localStorage, so a returning accepted visitor is recognised across visits. We do not give PostHog (or any provider) your name, email address, account reference, or any field you typed into a Goalsforge form.

We have measured our own live data rather than assuming: across the retained history available to us, the OpenPanel identifier was not observed on more than one calendar day, and every profile record the provider holds for this site is anonymous. We cannot promise the provider will never change this, so if that changes we will update this policy.

Each provider's own privacy policy is the authoritative statement of what it stores and for how long. Where this page and that policy differ, that policy is what governs the provider's processing. The relevant links are repeated in each section above.

We do not use Google Analytics, Meta Pixel, LinkedIn Insight, Hotjar, Plausible, Fathom, or any advertising or behavioural pixel on this marketing site (goalsforge.com) or inside the Goalsforge app. PostHog (above) is our chosen analytics platform with Session Replay; it is gated behind an explicit Accept on the cookie banner and is fully off when you choose Essential only.

Third parties that may set cookies

The website is served through Cloudflare's CDN. Cloudflare may set its own strictly-necessary cookies for routing, caching, and security (for example__cf_bm for bot management). PostHog sets a small number of its own cookies (a pseudonymous visitor id and a session id) only after you have accepted analytics. These are governed by PostHog's privacy and cookie documentation rather than ours:cloudflare.com/privacypolicy,posthog.com/privacy.

How long cookies stay on your device

  • Session cookies: deleted when you close the browser.
  • 30-day cookies (e.g. "remember me"): up to 30 days.
  • Cookie-preference record: up to 12 months.
  • Cloudflare security cookies: typically up to 30 minutes to 24 hours, depending on the cookie.
  • PostHog cookies (set only after Accept): the pseudonymous visitor id is renewed each accepted visit; details in the PostHog privacy policy.
  • Analytics events (all three providers): no fixed period. None of the three providers publishes a deletion schedule for analytics data in the configuration we use. Umami's one published retention statement is documented for self-hosted installations, not for the Umami Cloud plan we use; OpenPanel states it keeps data only as long as needed for the purposes in its own privacy policy; PostHog publishes no fixed retention period for the EU region. See thecookie policy for what each event contains.

How to control cookies

You can withdraw or change your choice at any time by clearing your browser's storage for goalsforge.com, or by clicking "Manage preferences" in the cookie banner. You can also block cookies in your browser settings; blocking strictly-necessary cookies will break sign-in and security features.

Helpful guides for the most common browsers:

Changes to this policy

If we add new cookies or change the categories above, we will update this page and bump the "last updated" date. For anything material we will also notify registered users by email.

More about your data

For lawful basis, recipients, retention, and your GDPR / UK-GDPR rights, see ourPrivacy Policy.

Contact

Questions about cookies or storage on this site:[email protected].