Cookie Policy
Last updated: 8 June 2026
This policy explains how TP Benchmark uses cookies and similar technologies (such as browser localStorage), and how you can control them.
What cookies are
Cookies are small files stored on your device. We use a small number of them: some are strictly necessary to run the app, and one optional category is for product analytics.
Full and anonymous analytics
A banner lets you Accept or Decline. If you accept, we enable full product analytics (PostHog), which sets the analytics cookie listed below. If you decline, or before you choose, no analytics cookie is set: we use only anonymous, cookieless measurement (a privacy-preserving server-side hash with no cookies, no user identifier, and your IP address stripped) for aggregate usage statistics only. (We store one small flag in your browser’s local storage to remember your analytics choice, so we can honor it.)
You can change or withdraw your choice at any time using the Cookie settings link in the footer. To opt out of the anonymous measurement as well, enable Global Privacy Control or Do Not Track in your browser (we honor both automatically), or contact us. Essential cookies cannot be switched off, as the app cannot function without them.
Cookies we use
| Name | Provider | Purpose | Category | Retention |
|---|---|---|---|---|
sb-…-auth-token | Supabase | Keeps you signed in | Essential | Session |
tpbench-cookie-consent | TP Benchmark | Remembers your cookie choice | Essential | 180 days |
tpbench-active-org-id | TP Benchmark | Remembers your active organization | Functional | 30 days |
theme (localStorage) | TP Benchmark | Remembers light or dark mode | Functional | Until cleared |
ph_…_posthog (cookie + localStorage) | PostHog | Product analytics: usage and feature adoption, so we can improve the product (set only if you accept) | Analytics (optional) | Up to 12 months |
Third parties
Analytics is provided by PostHog (US cloud). If you accept, it runs in full mode and sets the cookie above; if you decline or have not chosen, it runs in cookieless mode (no cookies, no user identifier, IP stripped). Session replay is disabled and form inputs are masked. Our payment provider, Stripe, may set its own cookies on its hosted checkout pages for fraud prevention; those are governed by Stripe’s policies.
More information
For how we handle personal data more broadly, see our Privacy Policy. Questions about cookies can be sent to privacy@qualisync.com.