Cookie Policy

1. About cookies and localStorage

"Cookies" are small text files saved by your browser. "localStorage" is a similar browser-storage mechanism used by Worthify instead of traditional cookies.

2. What we use

Strictly necessary — no consent required under UK PECR

• pendingAnalysis (localStorage) — stores analysis results during the Stripe payment process so the dashboard is ready when you return from checkout. Lifetime: until payment completes or tab closes.
• pendingRegistration / pendingAskingPrice / pendingPdfReg / pendingPdfLang / pendingPdfPrice (localStorage) — preserve the payment context during Stripe checkout.
• worthifyPdfUnlockedReg (localStorage) — saves the registration for which you purchased the Premium PDF, enabling re-downloads. Lifetime: persistent (you can clear via browser settings).
• worthify_cookie_consent (localStorage) — records your cookie-banner choice ("essential only" or "analytics accepted").
• Stripe — Stripe Checkout (separate domain checkout.stripe.com) sets its own session cookies during payment. Stripe is a separate data controller — see their cookie policy for details.

Product analytics — ONLY with explicit consent

• PostHog (eu.i.posthog.com) — product behavioural analytics hosted in the EU/Frankfurt region. We record only anonymised product events: screen views, CTA clicks, payment funnel completion. The visitor's IP address is blocked (property_blacklist: ["$ip"]). PostHog is activated ONLY after you click "Accept analytics" in the cookie banner. You can withdraw consent at any time by clearing localStorage.
• Sentry (sentry.io, EU region) — application error tracking so we can fix crashes. Sentry runs under legitimate interest (debugging technical errors your browser reports), but in privacy-first mode: zero PII, all text fields and inputs are masked (maskAllText, maskAllInputs, blockAllMedia). IP addresses are not stored.

3. What we do NOT do

• We do not use Google Analytics, Facebook Pixel, or any advertising scripts
• We do not send data to advertisers
• We do not build marketing profiles or sell data
• We do not share your activity with third parties beyond PostHog (under your consent) and Sentry (legitimate interest — debugging)

4. How to manage cookies and analytics

• Withdraw analytics consent — clear worthify_cookie_consent in localStorage, the banner will reappear
• Clear localStorage in your browser settings (Chrome: Settings → Privacy → Site Data → worthify.co.uk → Delete)
• Block Stripe cookies — this will prevent payments
• Use incognito mode — all data is cleared when you close the tab
• Enable "Do Not Track" in your browser — PostHog respects DNT and will automatically disable capturing

5. Changes

The current policy is at worthify.co.uk/cookies. Last updated: 8 February 2026.

6. Contact

Questions: support@worthify.co.uk.