1. What we set without consent
theme— remembers light/dark preference. Local storage; no cookie strictly necessary, but counted here for completeness.__pg_csrf— CSRF token on form pages. Session-only.- Cloudflare bot-protection cookies — legitimate interest in keeping the site available.
2. What we set only with consent
ph_*(PostHog) — anonymous product analytics events. Identifies you across pages on this site only; never linked to ad networks.- Any A/B test bucket cookies, if we run an experiment.
3. What we don't set
- No third-party advertising cookies.
- No third-party tracking pixels.
- No data sharing with ad networks.
- No "Do Not Sell" requirements because we don't sell.
4. Your choices
On first visit you'll see a bottom-of-page banner with three options: "Accept", "Reject", "Customise". Your choice is remembered for 12 months. You can change your choice at any time via the "Cookie preferences" link in the footer.
5. The application (app.paragraphs.co.uk)
The signed-in product sets additional cookies that are strictly necessary for the service to function (session, CSRF, locale, currency). These are governed by the Terms of Service rather than this cookie policy because they're necessary to provide the service you've signed up for.