1. Introduction
This Cookie Policy explains how Chartbuddy ("we," "us," or "our") uses cookies and similar technologies when you visit our website at https://chartbuddy.io ("the Website"). This policy should be read alongside our Privacy Policy.
2. What Are Cookies
Cookies are small text files that are placed on your device (computer, smartphone, or tablet) when you visit a website. They are widely used to make websites work more efficiently and to provide information to website owners about how users interact with their sites.
3. How We Use Cookies
We use cookies to:
- Enable essential website functionality (authentication, security, session management)
- Analyze website usage to improve our services and user experience
- Provide customer support through our chat widget
- Remember your cookie preferences to avoid repeatedly showing consent banners
- Attribute Google Ads visits: if you arrived from a Google ad, we set Chartbuddy cookies so we can tell a later signup came from that visit. The visit marker lasts 7 days; the advertising click identifier lasts 90 days
4. Types of Cookies We Use
4.1. Essential Cookies (Always Active)
These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services.
Session Management Cookies:
chartbuddy_session- Maintains your login session (Duration: Session, Provider: Chartbuddy)XSRF-TOKEN- Protects against cross-site request forgery attacks (Duration: Session, Provider: Chartbuddy)
Consent Storage:
- Browser localStorage - Your cookie preferences are stored locally in your browser (not as a cookie) for enhanced privacy. This data never leaves your device. (Duration: Persistent until you clear browser data, Provider: Your Browser)
Authentication Cookies:
remember_web_*- Remembers your login when "Remember Me" is selected (Duration: 5 years, Provider: Chartbuddy)
4.2. Google Cookies (Set When You Sign In With Google)
If you choose to sign in with your Google account, Google sets its own authentication cookies on google.com. These are necessary to complete the sign-in you asked for. You do not need a Google account to use Chartbuddy: you can register with an email address and password, or use enterprise single sign-on.
Additional Google cookies are involved where you use Chartbuddy for Google Slides™, because the extension works directly with Google's APIs inside your browser.
Google OAuth and session cookies:
__Secure-3PSIDCC- Google secure session cookie (Duration: 1 year, Provider: Google)AEC- Google advertising and measurement cookie (Duration: 6 months, Provider: Google)APISID- Google API session identifier (Duration: 2 years, Provider: Google)HSID- Google session cookie (Duration: 2 years, Provider: Google)NID- Google preferences and information cookie (Duration: 6 months, Provider: Google)SAPISID- Google secure API session identifier (Duration: 2 years, Provider: Google)SEARCH_SAMESITE- Google SameSite enforcement cookie (Duration: 6 months, Provider: Google)SID- Google session identifier (Duration: 2 years, Provider: Google)SIDCC- Google security cookie (Duration: 1 year, Provider: Google)SSID- Google secure session identifier (Duration: 2 years, Provider: Google)
Legal Basis: These cookies are set because you asked us to sign you in with Google, which is necessary to perform our contract with you. They are set by Google under Google's own policies, not by Chartbuddy.
4.3. Analytics Cookies (Requires Consent)
These cookies help us understand how visitors interact with our website. They are only active if you consent via our cookie banner. Until you consent, our analytics providers are loaded in a denied state and do not store or send analytics data.
Website Analytics:
ph_phc_*- PostHog analytics. Tracks page views, interactions, and feature usage to improve our service (Duration: 1 year, Provider: PostHog, EU-hosted)
Data Processing: PostHog analytics data is processed in the European Union and does not include personally identifiable information.
4.4. Functional Cookies (Requires Consent)
These cookies enable enhanced functionality and personalization, such as customer support features.
5. Third-Party Cookies
We use the following third-party services that may set their own cookies:
5.1. Google (Authentication and Services)
- Purpose: OAuth authentication and Google Slides API integration
- Data Location: Global, with the safeguards described in Section 9
- Privacy Policy: https://policies.google.com/privacy
- Basis: Necessary to perform the sign-in or integration you request
5.2. PostHog (Analytics)
- Purpose: Website analytics and user behavior tracking
- Data Location: European Union
- Privacy Policy: https://posthog.com/privacy
- Opt-out: Available through our cookie consent banner
6. Managing Your Cookie Preferences
6.1. Cookie Consent Banner
When you first visit our website, you will see a cookie consent banner allowing you to:
- Accept all cookies - enables analytics and functional cookies
- Manage preferences - choose which categories of cookies to allow
Until you make a choice, analytics cookies are not set.
6.2. Changing Your Mind at Any Time
You can change or withdraw your choice at any time using the Cookie Preferences link in the footer of every page on this website. It reopens the same dialog and shows your current setting. Withdrawing consent takes effect immediately.
6.3. Browser Settings
You can also control cookies through your browser settings:
- Chrome: Settings > Privacy and security > Cookies and other site data
- Firefox: Settings > Privacy & Security > Cookies and Site Data
- Safari: Preferences > Privacy > Manage Website Data
- Edge: Settings > Cookies and site permissions > Cookies and site data
6.4. Help With Preferences
If you have trouble changing your preferences, or want us to confirm what is stored for you, email legal@chartbuddy.io.
7. Impact of Disabling Cookies
Essential Cookies:
- The website may not function properly; login and security features will not work
Google Cookies:
- You cannot sign in with Google, and Chartbuddy for Google Slides™ will not work. You can still register with an email address and password
Analytics Cookies:
- No impact on functionality; we cannot improve our service based on usage data
Functional Cookies:
- Customer support chat may not work properly; some personalization features disabled
8. Data Retention
- Essential cookies: Deleted when you close your browser or log out, except the "Remember Me" cookie described in Section 4.1
- Google Ads visit cookie: 7 days
- Google Ads click identifier: 90 days, used to measure signups after an ad click
- Analytics cookies: Data retained for up to 24 months for trend analysis
- Functional cookies: Retained for the duration of your session or as specified above
9. International Data Transfers
Our primary analytics provider, PostHog, processes data within the European Union.
Where you sign in with Google, Google authentication cookies may involve Google LLC processing data outside the European Economic Area. Those transfers rely on the EU-US Data Privacy Framework, under which Google LLC is certified, and on the European Commission's Standard Contractual Clauses as an additional safeguard.
10. Children's Privacy
Our website is not intended for children under 16. We do not knowingly collect personal information from children under 16 through cookies.
11. Changes to This Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by updating the "Last updated" date at the top of this policy.
12. Contact Information
If you have any questions about this Cookie Policy or our use of cookies, please contact us:
- Email: legal@chartbuddy.io
- Data Protection Officer: tim@chartbuddy.io
13. Legal Basis
Our use of cookies is based on:
- Essential cookies: Necessary to provide the website functionality you request
- Google sign-in cookies: Necessary to perform our contract with you, where you choose to sign in with Google
- Analytics cookies: Your explicit consent obtained through our cookie banner
- Functional cookies: Your explicit consent obtained through our cookie banner
14. Your Rights
Under GDPR, you have the right to:
- Withdraw consent for non-essential cookies at any time, using the Cookie Preferences link in our footer
- Access information about cookies we use
- Request deletion of cookie data (subject to essential functionality requirements)
- Lodge a complaint with your local data protection authority
For more information about your privacy rights, please see our Privacy Policy.