Cookie Policy

1. Technologies Covered

GleanMark uses cookies and related technologies when you visit gleanmark.com or use the GleanMark Service. These technologies include browser cookies, local storage, session storage, software development kits, pixels, device or browser identifiers, and memory-only or “cookieless” analytics. In this Policy, we call them collectively “cookies” unless a distinction matters.

Cookies can keep you signed in, remember settings, secure the Service, measure feature use, diagnose errors, and support customer communications. This Policy should be read with our Privacy Policy.

2. Categories We Use

Strictly necessary

These technologies support authentication, account security, load balancing, fraud prevention, consent records, checkout, and core Service functionality. The Service may not work without them, so they cannot be disabled through a GleanMark preference control.

Functional

Functional storage remembers interface settings, onboarding and tour state, saved preferences, recent state, and support interactions. Some functional technology is necessary for a feature you request.

Analytics and performance

Analytics helps us understand page and feature use, navigation, performance, errors, conversions, and product adoption. Depending on your location and consent status, it may use local storage, session storage, identifiers, or memory-only measurement. Analytics may include privacy-masked session replay as described in Section 4.

Marketing

We do not currently use cross-site behavioral advertising cookies in the Service. We may measure visits from our own campaigns and communications. If we introduce a materially different advertising practice, we will update this Policy and provide any choice required by law.

3. Providers

Depending on the feature and current configuration, cookie-related technology may be provided by:

• Supabase for authentication, session management, and security;
• PostHog for product analytics, feature measurement, and session replay;
• Google Analytics, where enabled, for website and campaign analytics;
• Stripe for secure checkout, subscriptions, payment risk, and fraud prevention;
• Intercom for support and customer communications; and
• Sentry for error diagnosis and performance monitoring.

Provider technology, cookie names, and durations can change as providers update their services. Our Subprocessor List describes current provider purposes more broadly.

4. Session Replay

GleanMark uses PostHog session replay throughout the product, including authenticated workflows that may involve Customer Content. Replay helps us observe how the interface is used, reproduce failures, improve workflows, answer support questions, and detect friction that ordinary event counts cannot explain.

Do not enter unnecessary sensitive personal information into free-text fields. Password inputs remain protected by browser and replay safeguards, and designated sensitive areas may be blocked or further masked.

5. Your Choices

Consent-required locations

In the EEA, United Kingdom, Switzerland, and other locations where opt-in consent is required, GleanMark asks before enabling nonessential analytics storage and session replay. You may accept, reject, or choose available categories in the banner. A choice stored in one browser may not automatically carry to another device or browser.

You can change or withdraw a stored choice at any time. Selecting “Manage cookie preferences” below clears the choice saved in this browser; where consent is required, the banner will appear again so you can make a new choice.

United States and other default-analytics locations

In locations that permit a default analytics model, analytics and masked replay may operate by default. For authenticated users, the product does not currently provide a general U.S. analytics opt-out. Anonymous visitors may receive different controls depending on location and browser state.

Browser controls

Most browsers let you block or delete cookies and clear local or session storage. Blocking necessary storage may prevent login or cause features to fail. GleanMark does not currently respond to every browser “Do Not Track” signal because no uniform technical standard applies. Where a legally recognized universal opt-out signal applies to a practice we conduct, we will handle it as required by law.

6. Duration and Updates

Session cookies generally expire when a browser session ends. Persistent cookies and browser storage remain until their configured expiration, until replaced, or until you or the provider deletes them. Authentication, security, and preference records may be retained separately on our systems as described in the Privacy Policy.

We may update this Policy as technologies and practices change. For a material change, we will require an authenticated user to review and affirmatively accept updated policies before continuing to use the Service; the change takes effect for that user upon acceptance. Other changes may take effect when posted.

7. Contact

Questions about cookies and analytics may be sent to: