Cookie Policy

1. What are cookies?

Cookies are small text files stored by your browser when you visit a website. They allow the site to remember information across page loads — for example, that you are signed in.

2. What cookies we use today

EcoDiligence currently uses only essential cookies required to operate the service. We do not set analytics cookies, marketing cookies, or third-party tracking cookies.

• Clerk authentication cookies — set by our auth provider (Clerk) to keep you signed in across pages. These expire when you sign out or after a period of inactivity.
• Vercel session cookies — set by our hosting provider for routing and security. Short-lived.

Because these cookies are strictly necessary for the service to function, they are exempt from the consent requirement in Article 5(3) of the EU ePrivacy Directive. That exemption covers the cookies listed above and nothing else — our analytics and session recording are described separately in section 3, together with the legal basis we rely on for them.

3. Privacy-friendly analytics and session recording

EcoDiligence uses PostHog to count page views, record anonymized session replays, and understand which parts of the service are used. This configuration:

• keeps analytics state in memory only, not in a cookie;
• records how you interact with the page (clicks, scrolling, mouse movement) to help us diagnose issues and improve the product;
• masks the contents of all form fields — what you type is never captured;
• masks the text of the page itself, so a replay shows layout and interaction but not the content you are reading or the figures in your ESG Passport;
• does not link recordings to a persistent identifier across visits; and
• does not create person profiles for anonymous visitors.

Because this processing is not strictly necessary to deliver the service, we do not rely on the exemption in section 2. We rely on our legitimate interest in diagnosing faults and improving the product, balanced against the limits above — no cookies, no cross-visit identifier, and no page or form content in the recording. You can object to it at any time.

To opt out of session recording and analytics on this site, turn on the do-not-track setting in your browser — we honour it, and it stops both analytics and recording before anything is sent. You can also email privacy@ecodiligence.com and we will confirm the objection in writing.

4. Managing cookies in your browser

You can clear or block cookies through your browser settings. Note that blocking the essential cookies listed above will prevent you from signing in to EcoDiligence. Each browser handles this differently:

• Chrome: Settings → Privacy and security → Cookies and other site data.
• Firefox: Settings → Privacy & Security → Cookies and Site Data.
• Safari: Preferences → Privacy → Manage Website Data.
• Edge: Settings → Cookies and site permissions → Cookies and site data.

5. Related policies

For details on how we handle personal data more broadly, see our Privacy Policy.

6. Contact

Questions about this Cookie Policy: privacy@ecodiligence.com.