StackPilot App
Legal

Cookie Policy.

Last updated · June 17, 2026 Plain English where possible DPDPA · GDPR · CCPA compliant

This Cookie Policy explains how Hayanlabs uses cookies and similar technologies on stackpilotapp.com. It supplements our Privacy Policy.

What are cookies?

A cookie is a small text file stored on your device by your browser. We also use comparable technologies such as localStorage entries for consent state. "Cookies" in this Policy means both.

Categories of cookies we use

2.1 Strictly necessary (no consent required)

  • Cloudflare Turnstile - bot-protection tokens issued on form submission (Contact, Feedback, Partner Application). Session-only. Without these, our forms cannot reliably stop abuse.
  • Cookie-consent preference - a single first-party cookie (sp_consent) recording your accept / reject choice so we do not ask again on every page. 12 months.

2.2 Functional (consent required in the EU / UK)

  • sp_ref - first-party cookie that stores the referral or partner code from your inbound URL (?ref= or ?partner=). Used so that, if you create an account or purchase, the right person is credited with the referral reward or royalty. Retention: 30 days. Domain: stackpilotapp.com. SameSite: Lax.

2.3 Analytics (consent required in the EU / UK)

  • Vercel Analytics - pseudonymised page-view and route data, used in aggregate. Vercel does not set advertising or cross-site tracking cookies for this product. Retention: as per Vercel's documentation.
  • Vercel Speed Insights - Web Vitals (LCP, INP, CLS) for performance optimisation. Aggregated, no personal profiling.
  • Google Analytics 4 - page-view, traffic-source, and interaction data used in aggregate to understand how the Site is used. Sets first-party cookies (_ga, _ga_*). Retention: up to 13 months. Provider: Google LLC (US).
  • PostHog - product analytics (page views, clicks, and session recordings with keystrokes masked) used to improve the Site. Sets first-party cookies / localStorage entries prefixed ph_. Retention: 12 months. Provider: PostHog Inc., hosted in the EU (Frankfurt).

2.4 Advertising & conversion measurement (consent required in the EU / UK)

  • X (Twitter) Ads pixel - loaded when we run campaigns on X, to measure conversions from those ads and, where X permits, build re-targeting audiences. It may set third-party cookies on X's domains (e.g. personalization_id, muc_ads). Provider: X Corp. (US). Retention: as per X's cookie policy.

2.5 What we do NOT use

  • No advertising trackers other than the X Ads pixel described in 2.4
  • No data brokers or third-party audience-data purchases
  • We never sell your personal data

How we obtain consent

When you first visit the Site from the EU, UK, or another region requiring prior consent, we show a cookie banner. Non-essential cookies (functional sp_ref, Vercel Analytics, Speed Insights, Google Analytics, PostHog, and the X Ads pixel) load only after you click "Accept all" or "Accept selected." If you click "Reject all," only strictly necessary cookies are set.

Changing your preferences

You can change or withdraw consent at any time:

  • Click "Cookie Preferences" in the Site footer to reopen the banner.
  • Clear cookies for stackpilotapp.com in your browser; the banner will reappear on next visit.

Withdrawing consent does not affect the lawfulness of processing performed before withdrawal.

Third-party cookies

When you follow an outbound link (X, LinkedIn, YouTube, our app domain) or interact with embedded content (e.g., Turnstile widget), those third parties may set their own cookies governed by their own policies.

Updates

We will update this Cookie Policy whenever we add, remove, or change a cookie used by the Site. The "Last updated" date at the top reflects the most recent change.

Contact

Questions about cookies: privacy@stackpilotapp.com