The short version
- We use very little. Two cookies keep you signed in, one makes sure a shared browser never shows the previous person’s details, one tells us whether to ask before analytics, one remembers your answer so our servers follow it too, and a few settings are saved in your browser.
- Analytics are optional. We use PostHog to see how Grapevinee is used. What you type, and the names and other details on your screen, are never sent.
- In the EU, UK and Switzerland analytics stay off until you choose “Allow analytics”. Everywhere else they are on, and one tap turns them off.
- Global Privacy Control in your browser switches analytics off without a question.
- No ads, no advertising cookies, no social media pixels, no cross-site tracking.
- What changed on October 3, 2026: one cookie is added,
gv_ac: it remembers whether you allowed analytics, so Grapevinee’s servers respect your answer too. It holds only “yes” or “no”. Nothing new is collected or used. The previous version is in Versions.
This summary helps you find your way. The full text below is what applies.
Your choice
- In the EU, EEA, UK and Switzerland: analytics are off until you choose “Allow analytics”. “No thanks” is just as easy, and closing the banner counts as no.
- Everywhere else: analytics are on by default, and you can turn them off at any time.
- Anyone can change their mind at any time, with Change cookie settings on this page or, once you are signed in, in Settings under Privacy & permissions.
- When you are signed in, turning analytics off is saved to your account too, so they stay off on every device you sign in on. Saying yes lifts that account-wide “off”, but a device where you said no, or where we ask first, keeps its own answer until you change it there.
- If your browser sends Global Privacy Control, we treat it as “No thanks” to analytics and recordings, and we don’t ask.
- Turning analytics off changes nothing else about how Grapevinee works for you.
We work out whether to ask first from the country our load balancer sees your connection coming from, or, if that isn’t available, from your device’s time zone and languages. If in doubt, we ask.
Always on: needed to run Grapevinee
| Name | Type | What it does | Lasts |
|---|---|---|---|
gv_at | Cookie (httpOnly, Secure, SameSite=Lax) | Keeps you signed in (a short-lived access token) | 15 minutes |
gv_rt | Cookie (httpOnly, Secure, SameSite=Lax) | Renews your sign-in. A stolen one is detected and revoked. | 30 days |
gv_sm | Cookie (Secure, SameSite=Lax) | A random value that changes each time you sign in, so this browser never shows the previous person’s details. Holds nothing about you. | Expires with your session (deleted when you sign out) |
gv_region | Cookie (Secure, SameSite=Lax) | Your country as a two-letter code, so we know whether to ask before any analytics. Nothing else. | 1 day |
gv_aoff | Cookie (Secure, SameSite=Lax) | Set only when your account has analytics switched off, so no screen sends anything before we have checked. Holds no id. | Until you sign out or switch analytics back on |
gv_ac | Cookie (Secure, SameSite=Lax) | Remembers whether you allowed analytics, so Grapevinee’s servers respect your answer too. Holds only “yes” or “no”. | Until you sign out (at most 400 days); a new answer replaces it |
gv_google | Cookie (httpOnly, Secure, SameSite=Lax, only for the Google sign-in address) | Only while you sign in with Google: ties Google’s answer to the request you started, so nobody can slip in theirs | 10 minutes, then deleted |
gv_signup | Cookie (httpOnly, Secure, SameSite=Lax) | Only while you finish creating an account after Google or an email code: carries the proof of your address to that one screen | Up to 2 hours; deleted when you finish |
Strictly necessary cookies
gv_at- Type
- Cookie (httpOnly, Secure, SameSite=Lax)
- What it does
- Keeps you signed in (a short-lived access token)
- Lasts
- 15 minutes
gv_rt- Type
- Cookie (httpOnly, Secure, SameSite=Lax)
- What it does
- Renews your sign-in. A stolen one is detected and revoked.
- Lasts
- 30 days
gv_sm- Type
- Cookie (Secure, SameSite=Lax)
- What it does
- A random value that changes each time you sign in, so this browser never shows the previous person’s details. Holds nothing about you.
- Lasts
- Expires with your session (deleted when you sign out)
gv_region- Type
- Cookie (Secure, SameSite=Lax)
- What it does
- Your country as a two-letter code, so we know whether to ask before any analytics. Nothing else.
- Lasts
- 1 day
gv_aoff- Type
- Cookie (Secure, SameSite=Lax)
- What it does
- Set only when your account has analytics switched off, so no screen sends anything before we have checked. Holds no id.
- Lasts
- Until you sign out or switch analytics back on
gv_ac- Type
- Cookie (Secure, SameSite=Lax)
- What it does
- Remembers whether you allowed analytics, so Grapevinee’s servers respect your answer too. Holds only “yes” or “no”.
- Lasts
- Until you sign out (at most 400 days); a new answer replaces it
gv_google- Type
- Cookie (httpOnly, Secure, SameSite=Lax, only for the Google sign-in address)
- What it does
- Only while you sign in with Google: ties Google’s answer to the request you started, so nobody can slip in theirs
- Lasts
- 10 minutes, then deleted
gv_signup- Type
- Cookie (httpOnly, Secure, SameSite=Lax)
- What it does
- Only while you finish creating an account after Google or an email code: carries the proof of your address to that one screen
- Lasts
- Up to 2 hours; deleted when you finish
Grapevinee can’t work without these, so they don’t need your consent. They are never used for analytics, and page scripts can’t read the two sign-in cookies.
Settings saved in your browser
| Name | Where | What it does |
|---|---|---|
gv-theme | Local storage | Remembers dark or light theme |
gv_tz | Local storage | Remembers that we already saved your time zone, so reminders arrive in the morning where you are |
gv-analytics-consent | Local storage | Your analytics answer (yes or no), so we don’t keep asking |
gv-analytics-consent-at | Local storage | When you gave that answer, so an older answer on this device never overrides a newer one you gave elsewhere |
gv-analytics-notice-seen | Local storage | That you have seen the analytics notice, so it is shown only once |
gv-analytics-consent-by | Local storage | Whose analytics answer that is (your account’s internal id, or that you were signed out), so on a shared browser one person’s answer never becomes another’s |
gv-a2hs-hint-dismissed | Local storage | That you closed the “add to your home screen” tip, so it doesn’t come back |
__ph_opt_in_out_… | Local storage | PostHog’s own copy of your analytics answer, written only once you answer |
gv-analytics-consent-synced | Session storage (gone when you close the tab) | That your answer is already saved to your account, so it isn’t sent twice |
gv-vine-view | Session storage (gone when you close the tab) | Whether your home screen shows the bunch, the spread or the Tapestry |
gv-path-q | Session storage (gone when you close the tab) | Your last “Who can introduce me to…” search, so going back shows the same answer (never in the page address) |
gv-person-from | Session storage (gone when you close the tab) | Which list you opened someone from, so Back returns you there |
gv:auth-email | Session storage (gone when you close the tab) | The email you typed, carried from “Create account” to “Sign in” when you already have an account, then deleted |
Local and session storage
gv-theme- Where
- Local storage
- What it does
- Remembers dark or light theme
gv_tz- Where
- Local storage
- What it does
- Remembers that we already saved your time zone, so reminders arrive in the morning where you are
gv-analytics-consent- Where
- Local storage
- What it does
- Your analytics answer (yes or no), so we don’t keep asking
gv-analytics-consent-at- Where
- Local storage
- What it does
- When you gave that answer, so an older answer on this device never overrides a newer one you gave elsewhere
gv-analytics-notice-seen- Where
- Local storage
- What it does
- That you have seen the analytics notice, so it is shown only once
gv-analytics-consent-by- Where
- Local storage
- What it does
- Whose analytics answer that is (your account’s internal id, or that you were signed out), so on a shared browser one person’s answer never becomes another’s
gv-a2hs-hint-dismissed- Where
- Local storage
- What it does
- That you closed the “add to your home screen” tip, so it doesn’t come back
__ph_opt_in_out_…- Where
- Local storage
- What it does
- PostHog’s own copy of your analytics answer, written only once you answer
gv-analytics-consent-synced- Where
- Session storage (gone when you close the tab)
- What it does
- That your answer is already saved to your account, so it isn’t sent twice
gv-vine-view- Where
- Session storage (gone when you close the tab)
- What it does
- Whether your home screen shows the bunch, the spread or the Tapestry
gv-path-q- Where
- Session storage (gone when you close the tab)
- What it does
- Your last “Who can introduce me to…” search, so going back shows the same answer (never in the page address)
gv-person-from- Where
- Session storage (gone when you close the tab)
- What it does
- Which list you opened someone from, so Back returns you there
gv:auth-email- Where
- Session storage (gone when you close the tab)
- What it does
- The email you typed, carried from “Create account” to “Sign in” when you already have an account, then deleted
They stay in your browser until you change them or clear your browser’s data. We don’t use them for anything else.
Analytics: optional
We use PostHog to see how Grapevinee is used, so we can find what confuses people and fix it. PostHog keeps an identifier in a cookie and in local storage named ph_<project key>_posthog. Where we ask first, your browser doesn’t contact PostHog and nothing is stored until you choose “Allow analytics”, and if you turn analytics off it stops storing anything. It records:
- pages you view, and the buttons and links you click (but not the text of what you clicked, which in Grapevinee is usually someone’s name);
- how long screens take to load and how long you spend on them, and where clicks go nowhere;
- errors;
- device and browser type;
- approximate location (country or city), worked out from your IP address; and
- once you are signed in, your Grapevinee account ID and account facts (plan, role, sign-up date and method, trial end). We never send PostHog your name or email address, or anything about the people on your vine.
To keep it that way, before anything leaves your browser we remove:
- the page title (in Grapevinee it can be a person’s or a cluster’s name);
- the wording, labels and other attributes of what you clicked;
- where a link to another website, an email address or a phone number points (it is sent only as “external”); and
- the secret part of links that carry one (invitations, sign-in codes).
Session recordings let us replay how a page behaved: clicks, scrolling and movement, like a video of the layout. In them:
- everything you type is hidden;
- all text on the page is hidden, including names, notes and messages. Only fixed wording that is the same for everyone, like button labels and headings, may be visible;
- images and video are not recorded; and
- network requests are not recorded: what the app sends and receives stays out of recordings.
We keep analytics events for up to 12 months and recordings for up to 30 days. PostHog processes the data for us as our service provider, in the United States, and doesn’t use it for its own purposes.
We do not use advertising cookies, social media pixels or cross-site tracking.
More information
The Privacy Policy explains everything else we do with personal information. Questions: privacy@grapevinee.com.
Versions
Every version we publish stays online at its own address, so you can always see what applied when.