At a glance
- This website, postocial.com, sets no cookies. It uses no analytics, advertising pixels or third-party scripts.
- The Postocial app at app.postocial.com uses only the cookies it needs to sign you in and keep your account secure.
- Some app features, such as payments or importing from Google Drive, load services that may set their own cookies while you use them.
- We don't use cookies for advertising or to follow you across other websites.
What cookies are
Cookies are small text files a website saves in your browser so it can recognize the browser later. Similar tools, such as your browser's local storage, work in much the same way. In this policy, "cookies" covers both.
Our website
- postocial.com doesn't set cookies or store anything on your device. Our fonts, styles, scripts and images are served from our own domain, so showing a page doesn't send requests to any other domain.
- The free tools on the website, such as the character counter, text styler and image resizer, run entirely in your browser. What you type or upload into them stays on your device.
- The site runs on our own server, hosted by Contabo in Germany. Like any web server, it receives the technical data each request includes, such as your IP address, browser type and the page you asked for, so it can deliver the page and keep the site secure.
Cookies in the Postocial app
The app at app.postocial.com sets these first-party cookies:
| Cookie | What it does | How long it lasts | Type |
|---|---|---|---|
postocial_session | Keeps you signed in while you use the app and connects your requests to your session. | 2 hours, renewed while you use the app | Strictly necessary |
XSRF-TOKEN | Protects your account from cross-site request forgery by confirming that each request really comes from the app. | 2 hours, renewed while you use the app | Strictly necessary |
| Remember-me cookie | Keeps you signed in between visits. It is set only if you choose to stay signed in when you log in. | Until you log out or it expires | Functional, set at your request |
These cookies are sent only over secure (HTTPS) connections, and the session cookie can't be read by scripts on the page. None of them is used for advertising. The app may also use your browser's local storage to remember interface preferences, such as dark mode.
Third-party services in the app
Some features load another company's service in your browser while you use them. These services may set their own cookies, under their own policies:
- Stripe, for payment pages and fraud prevention. See Stripe's cookie policy.
- Google Drive, when you pick files to import. See how Google uses cookies.
- Dropbox, when you import files from it, and Adobe Express, when you edit an image with it.
- Unsplash and Giphy, whose images and GIFs may load directly from their servers while you browse them, which gives those servers your IP address.
- Pusher, which keeps a connection open to deliver realtime updates and receives technical connection data such as your IP address.
- Bunny Fonts, which serves the app's font on every page, including sign-in and sign-up. Your browser downloads the font from Bunny's servers, which gives Bunny your IP address. Bunny says it keeps no logs of these requests and doesn't track visitors. See Bunny's privacy policy.
We don't control these cookies. To learn more, read the privacy or cookie policy of each service.
Pages our customers publish
Postocial customers can publish bio pages, short links, QR codes and forms, add a live-chat widget or a WhatsApp opt-in popup to their own websites, and share a public booking page where people book meetings with them. They can also add tracking pixels to their bio pages.
- The customer who runs the page decides how it's used. They're responsible for telling visitors about cookies and asking for consent where the law requires it, for example before a tracking pixel runs.
- A tracking pixel sets cookies controlled by the pixel's provider and by the customer, not by us.
- Bio pages, the live-chat widget, the WhatsApp opt-in popup and booking pages may use cookies or your browser's local storage to work. [What each one stores in the visitor's browser, to be confirmed]
- We process visitor data for the customer, as their processor. If you have a question about a page, contact the business that runs it.
Your choices
- We use only the cookies the app needs to work, which don't require consent, so we don't show a cookie banner. If we ever add cookies that need consent, such as analytics or advertising cookies, we'll ask for it first where the law requires and update this policy.
- You can block or delete cookies in your browser settings. If you block the app's cookies, you can't sign in. If you delete them, you're signed out.
Changes and contact
We update this policy when the cookies we use change, and we change the date at the top when we do. Questions? Email hello@postocial.com. Our Privacy Policy explains how we handle personal data more broadly.