PPMWizard uses a limited set of cookies and browser storage to authenticate users, protect the Service, remember preferences, complete billing, and—with your permission—measure aggregate usage and advertising attribution. Optional Google technology is default-denied and Google’s script is not downloaded until you opt in.
Technologies in use
| Name | Purpose | Duration |
|---|---|---|
| Supabase authentication cookies | Authenticate your account, refresh your session, and keep you signed in. Exact names can include a project-specific prefix. | Session or persistent, based on authentication settings |
| Infrastructure and security cookies | May be set by Vercel or other infrastructure to deliver and protect the Service. | Typically session or short-lived |
| Stripe cookies | Stripe may set cookies on its hosted Checkout and Customer Portal pages for payment, fraud prevention, and security. | Controlled by Stripe |
| Expert Mode preference | Local browser storage remembers whether you enabled Expert Mode. It is not used for advertising. | Until you clear browser storage |
| PPMWizard privacy consent | Local browser storage records your Analytics and Advertising measurement choices. It contains no account or offering information. | Up to 180 days, then we ask again |
| Google purchase-attribution cache | After Analytics consent on a public page, local browser storage may briefly retain Google’s client and session identifiers so a verified Stripe purchase can be attributed without loading Google on a private app route. | Up to 30 minutes; removed when Analytics consent is withdrawn |
Google Analytics cookies (_ga, _ga_*) | Distinguish consented browser sessions and measure privacy-filtered usage in Google Analytics 4. | Only after Analytics consent; commonly up to 2 years, subject to Google and browser controls |
Google Ads measurement cookies (_gcl_*, _gac_*) | Attribute consented conversions to advertising campaigns. Personalized-ad signals remain disabled. | Only after Advertising measurement consent; commonly up to 90 days, subject to Google and browser controls |
Cookieless analytics
We use Vercel Web Analytics to understand aggregate page usage and performance. Vercel Web Analytics does not use analytics cookies and is designed not to track a visitor across days or across websites. It may process information such as page path, referrer, approximate location, browser, operating system, and device category in aggregated form.
Optional Google measurement
Google Consent Mode v2 starts with analytics_storage, ad_storage,ad_user_data, and ad_personalization denied. Because PPMWizard uses a consent-first implementation, no Google tag or consent ping is requested before you opt in. Analytics consent enables privacy-filtered Google Analytics page views and allowlisted events. Advertising measurement consent also enables Analytics and permits campaign attribution; PPMWizard keeps ad_personalization denied.
Analytics paths replace private offering, Form D, questionnaire, and document identifiers with a generic [id] marker. All query parameters are removed except strictly validated utm_source, utm_medium, utm_campaign,utm_content, and utm_term values after Analytics consent, andgclid, gbraid, or wbraid after Advertising measurement consent. We do not send private wizard answers or exported-document content as analytics event properties. Google measurement is forced to denied on dashboard, wizard, generated-document, Form D, questionnaire, and billing routes, regardless of a visitor’s public-site preference.
Your controls
Browser settings can delete or block cookies and local storage. Blocking authentication or security cookies will prevent sign-in or other core functionality. Clearing local storage resets preferences such as Expert Mode and causes the privacy banner to appear again. Use the consent banner or “Cookie settings” in the footer to accept, reject, or change optional categories at any time. Withdrawing consent updates Google’s consent state, stops PPMWizard from sending optional events, and removes accessible first-party Google measurement cookies from the PPMWizard domain.
Contact
Questions: privacy@ppmwizard.com.