Cookie policy
How SEOH uses cookies and browser storage
This policy explains the cookies, browser storage, consent controls, analytics, session replay, heatmaps, performance, and diagnostic measurement used on SEOH's website.
Last updated October 27, 2026
Terms and requirements.
SEOH asks every visitor to choose optional preference, analytics, and marketing storage. PostHog Cloud EU is the active consent-gated analytics processor when the relevant deployment flags are enabled and the visitor accepts analytics. Google Analytics 4 measurement ID G-V7DPZPZJJ7 is reserved but inactive. Mautic browser tracking is inactive unless separate technical and privacy-approval flags are enabled and the visitor accepts marketing storage; Mautic campaign sends remain separately unauthorized. Google advertising signals remain denied under the current consent design.
What cookies are
Cookies are small browser files that help websites remember settings, measure visits, secure sessions, and understand how pages are used. Similar technologies can include pixels, local storage, and analytics tags.
Current launch state
SEOH shows the consent control on every localized public page. Necessary storage supports the consent decision, compliance-sensitive access, short-lived share handling, session synchronization, authentication where used, and public offline caching. Preference storage covers theme, persona, audience, scope, drafts, planner, and game-display choices. Analytics storage covers SEOH analytics markers and PostHog. Marketing storage is a separate choice and does not activate Mautic unless both deployment approval flags are also enabled. PostHog starts only after analytics consent and its public deployment flags are enabled. Preference, analytics, and marketing categories are denied by default and can be selected independently.
Categories SEOH may use
Necessary storage provides a requested feature, protects a session, records the consent decision, supports a compliance gate, or keeps public offline content available. Preference storage remembers optional visitor choices. After analytics consent, PostHog may measure pageviews, referrers, campaign parameters, registered marketing and product events, autocaptured clicks and form interactions, dead clicks, page exits, scroll and heatmap behavior, Web Vitals, performance attribution, browser errors, network timing, surveys if configured, and session replay on permitted routes. Replay text and inputs are masked; canvas recording, console-log capture, request or response bodies, and headers are disabled. Auth-token query parameters and sensitive payload fields are scrubbed before capture, and IP anonymization is configured at the project boundary. Marketing storage is reserved for separately approved browser tracking. The current design always denies Google advertising storage, advertising user data, and advertising personalization signals.
Cookie table and future updates
The table below lists the current website cookies and browser-storage families, the active PostHog Cloud EU analytics path, the reserved Google Analytics 4 measurement ID, and the fail-closed Mautic browser-tracking path. Non-essential rows apply only when the visitor accepts the matching category and any required deployment flags are enabled. Provider-generated names can vary by browser and provider version; SEOH will update this table before a materially different public use.
Managing cookies
Visitors can accept all, reject all optional storage, or manage preference, analytics, and marketing categories independently on every localized public page. The footer control lets a visitor reopen the choice. Browser settings can also block, delete, or limit cookies, local storage, session storage, and Cache Storage. Clearing storage may reset consent, theme, persona, audience, scope, drafts, planning state, the adult-page gate, authentication, analytics identifiers, or public offline content, but it should not prevent access to the main public website while online. Withdrawing a category stops future site use governed by that category; deletion from a separate provider or backup may require a rights request and remains subject to the Privacy Policy.
Questions and updates
Cookie questions can be sent through the contact page. SEOH may update this policy when analytics, consent, advertising, or measurement tools change.
| Name | Provider | Category | Purpose | Duration | Status |
|---|---|---|---|---|---|
| seoh-consent-v1 | SEOH website | Necessary consent storage | Stores whether the visitor accepted, rejected, or customized optional preference, analytics, and marketing storage. | Until cleared by the visitor. | Active on every localized public page |
| seoh_adult_gate and seoh_adult_gate_expires_at | SEOH website | Necessary compliance storage | Remembers acceptance of the lawful 18+ adult-page gate and its expiry time. | 30 days. | Active when an adult page is opened |
| seoh:pwa-share:v1:* | SEOH website | Necessary functional session storage | Temporarily holds a title, text, or URL shared into the installed web app so the requested share can be opened. | Removed after reading and treated as invalid after 5 minutes; otherwise until the browser session ends. | Used only when the visitor invokes the PWA share feature |
| seoh:pwa-granted-subscription-sync:v1 | SEOH website | Necessary functional session storage | Marks a granted browser-push subscription synchronization attempt so it is not repeated during the same browser session. | Browser session. | Used only where push is enabled and browser permission is already granted |
| seoh-pwa-offline-* | SEOH website service worker | Necessary functional Cache Storage | Caches localized public pages and assets so the installed web app can provide the requested offline experience. | Versioned cache; replaced by a later cache version or removed when the visitor clears site data. | Active where the browser supports the public offline experience |
| Supabase authentication cookies (provider-generated, for example sb-…-auth-token) | Supabase | Necessary authentication storage | Maintains an authenticated account or portal session and supports session refresh and security controls. | Session or provider-configured authentication lifetime; exact names and periods depend on the enabled project. | Used only when an account or portal feature is configured and the visitor signs in |
| seoh-theme and theme | SEOH website | Preference storage | Remembers the visitor's selected light or dark theme and supports the existing compatibility path. | Until cleared by the visitor. | Denied by default; stored only after preference consent |
| seoh-persona | SEOH website | Preference storage | Remembers the visitor's selected persona path after URL navigation. | 180 days. | Denied by default; stored only after preference consent |
| seoh_audience, seoh_audience_contact, and seoh_scope_v1 | SEOH website | Preference storage | Remembers the selected audience, direct-contact path, and scope so the website can keep the visitor's chosen route consistent. | Until cleared by the visitor. | Denied by default; stored only after preference consent |
| seoh_fit_quiz_draft_v1, seoh_direct_brief_draft_v1, seoh_service_lead_draft_v1:*, and seoh_gamification_result_v1 | SEOH website | Preference storage | Saves optional fit-quiz, brief, service-lead, or gamification draft state on the visitor's device. | Up to 90 days or until cleared. | Denied by default; stored only after preference consent |
| seoh_funnel_draft | SEOH website | Preference storage | Saves the optional funnel-planner draft on the visitor's device. | Up to 90 days or until cleared. | Denied by default; stored only after preference consent |
| seoh:funnel-planner-game-visible-v3 | SEOH website | Preference storage | Remembers whether the optional funnel-planner game preview is shown. | Until preference consent is withdrawn or site data is cleared. | Denied by default; stored only after preference consent |
| seoh:analytics-entry-dimensions, seoh:analytics-acquisition-dimensions, seoh:analytics-page-depth, seoh:analytics-visit-profile, and seoh:app-opened:* | SEOH website | Analytics session storage | Holds consented entry, acquisition, depth, visit-profile, and app-opened measurement state for the current browser session. | Browser session. | Denied by default; used only after analytics consent |
| seoh:analytics-visit-number, seoh:analytics-last-visit-at, and seoh:analytics-original-referrer | SEOH website | Analytics local storage | Supports consented visit-frequency, recency, and original-referrer measurement without placing those values in necessary storage. | Until analytics consent is withdrawn or site data is cleared. | Denied by default; used only after analytics consent |
| seoh:analytics-qa-mode and _postHogToolbarParams | SEOH website and PostHog | Analytics QA storage | Supports an explicitly enabled analytics quality-assurance or PostHog toolbar session in development or authorized QA use. | Until disabled, consumed, expired by the tool, or site data is cleared. | Not an ordinary visitor purpose; analytics consent remains required on public pages |
| Google Analytics 4 (G-V7DPZPZJJ7) | Analytics | Reserved for future aggregate website measurement after consent tooling and the GA4 tag are enabled. | Inactive. Google-set duration must be confirmed before enablement. | Not active; advertising signals remain denied under the current design | |
| PostHog Cloud EU provider-generated identifiers and opt-out state | PostHog | Analytics, session replay, heatmaps, errors, and performance diagnostics | Measures consented pageviews, referrers, campaign parameters, registered events, autocaptured clicks and form interactions, dead clicks, page exits, scroll and heatmap behavior, Web Vitals, performance attribution, browser errors, network timing, surveys if configured, and masked session replay on permitted routes. Text and inputs are masked. Canvas recording, console-log capture, headers, and request or response bodies are disabled. Sensitive properties and auth-token query parameters are scrubbed before capture; IP anonymization is configured. Consented device or person identifiers may support profiles and feature behavior. | Analytics events are retained for 12 months and session replays for 30 days. Browser identifiers or an opt-out marker can remain until they expire or the visitor clears storage; consent withdrawal stops future site capture but does not promise immediate deletion of every identifier already held by the browser or provider. | Active only after analytics consent and the consent-gated PostHog flags are enabled |
| Mautic provider-generated browser identifiers | SEOH self-hosted Mautic | Marketing browser tracking | Reserved for separately approved, consented browser engagement tracking. Browser tracking does not itself authorize marketing email or another campaign send. | Inactive. Exact provider-set names and periods must be verified before privacy approval is enabled. | Inactive unless technical enablement, privacy approval, and visitor marketing consent are all present |
| Saved page-review comments | This browser (localStorage) | Optional page-review feature | taxonomy-review-v1:seoh-feedback:<pathname> stores comments separately for each page and locale, including selected text and page or element context. The tool does not send comments to SEOH automatically; you choose whether and where to export, copy, or share them. | The tool sets no automatic expiry. A saved comment remains until you delete that comment, use the guarded clear-data action, or clear this site's browser storage. Exported or copied copies are separate from this browser record. | Created only while you use the optional ?feedback=1 page-review feature; unrelated to marketing or analytics consent |
| Unfinished page-review draft | This browser (localStorage) | Optional page-review feature | taxonomy-review-v1:seoh-feedback:<pathname>:draft stores an unfinished comment separately while you write. Saving the draft moves its text and selected-page context into the saved comment record and removes the separate draft; discarding removes the draft. | Until you save or discard the draft, use the guarded clear-data action, or clear this site's browser storage. After saving, the comment follows the saved-comment retention described above. No automatic expiry is set. | Created only while you use the optional ?feedback=1 page-review feature |
| Page-review checklist | This browser (localStorage) | Optional page-review feature | taxonomy-review-v1:seoh-feedback:__visited records pages visited in review mode, their locale and title, last-visited time, and review status. It is not automatically sent to SEOH. | The tool sets no automatic expiry. The checklist remains until you use the guarded clear-data action or clear this site's browser storage. | Created only while you use the optional ?feedback=1 page-review feature |
| Dictation-language preference | This browser (localStorage) | Optional page-review feature | taxonomy-review-v1:dictation-lang remembers the speech language you choose. It stores the language choice, not microphone audio. The page-review clear-data action does not remove this separate preference. | Until you choose a different language or clear this site's browser storage; no automatic expiry is set. | Stored only after you choose a dictation language |
| Screen-area screenshot | This browser (screen-sharing chooser and local download) | Optional page-review feature | If you choose Save area, the browser shows its screen-sharing chooser. After you select the current browser tab and grant permission, the tool captures the selected area and downloads an image to your device; the image is not uploaded. The saved comment may record the image filename and local-download status, not the image itself. | The downloaded image remains in your device's download location until you manage it. Screenshot metadata follows the saved-comment retention period above. | Used only after you choose Save area and grant browser permission |
| Browser speech recognition | Speech-recognition service selected by your browser | Optional browser feature | If you choose Dictate and grant microphone permission, browser speech recognition turns audio into editable text. Depending on the browser and provider, audio may be processed remotely and potentially outside Israel. The page-review code does not upload or store microphone audio; only recognized text can be saved in a local draft or comment. | SEOH does not control or know the provider's processing location or retention period. Refer to the browser or provider's information for its handling of audio. | Started only after you choose Dictate and grant microphone permission |
| Page-review opt-in | The page URL (?feedback=1); no browser-storage item | Optional page-review feature | The optional review tool runs only on a page opened with the ?feedback=1 opt-in. This URL choice does not grant marketing or analytics consent. Choosing Exit feedback mode changes the parameter to feedback=0. | Applies while the review-enabled URL is active; choosing Exit feedback mode turns it off for that tab. | Enabled only through the explicit page-review URL choice |
| Temporary clear-data undo copy | This browser (sessionStorage) | Optional page-review feature | seoh:site-feedback:clear-undo temporarily stores a local undo copy only after you copy the review data, confirm the guarded clear-data action, and the tool clears review records. It does not grant marketing consent or submit feedback. | Until you use Undo, exit review mode, or the tab's session storage ends. The tool sets no timer-based expiry. | Created only by the confirmed, guarded review-data clear action |
Questions can be sent to [email protected].