Cookie Policy

1) Scope

This Cookie Policy applies to Prepico (DataShastri) web properties. For how we process personal data, including data shared with our AI provider, see the Privacy Policy.

2) Cookies in use now

• Essential, sign-in: prepico_session keeps you signed in. It is HttpOnly, so scripts cannot read it.
• Essential, security: prepico_csrf protects forms and actions against cross-site requests.
• Essential, OAuth: prepico_oauth_state prevents sign-in request forgery; prepico_oauth_return_origin remembers the permitted return site. Both expire after ten minutes and are cleared when the callback is processed.
• Optional analytics: ph_<project-token>_posthog identifies an opted-in browser and analytics session. It lasts up to 90 days, refreshed on use, and is cleared when you withdraw analytics consent. It is limited to the current hostname.
• Optional ad measurement: Google Ads may set _gcl_* first-party cookies to associate advertising clicks with a signup. This integration limits their lifetime to 90 days and scopes them to the current hostname. Google may also use _gcl_ls browser storage after ad-measurement consent.
• Browser storage (not a cookie): remembers preferences, including prepico:analytics-consent:v1 and prepico:ads-consent:v1 (separate accepted or declined choices), until you change or clear them. PostHog may store session and consent state after opt-in. These preferences are browser-specific; changing devices requires a separate choice.

3) Separate optional choices

Product analytics enables PostHog. Ad measurement enables Google Ads signup measurement. Both choices are optional and start unchecked for a new browser. An earlier PostHog choice is retained, but never grants permission for Google Ads. Advertising personalization and enhanced conversion collection are disabled by this integration.

4) Your control

Choose Essential only to decline both optional purposes, or select Product analytics and/or Ad measurement and choose Save preferences. Reopen Cookie settings on any page to change your choices; withdrawing permission stops new collection for that purpose and clears its managed identity storage. Your choices are remembered in this browser and synchronized across its open tabs. Essential sign-in and security cookies remain. Clearing browser storage resets the choices.

5) Retention

• Session and security cookies last up to the configured sign-in period (currently 30 days) and are cleared at sign-out. Server-side session expiry also ends access.
• OAuth cookies expire after ten minutes or are cleared at callback.
• The PostHog analytics identity cookie lasts up to 90 days, refreshed on use. Session state is session-scoped; consent preferences remain until changed or browser storage is cleared. Withdrawing consent stops future collection; it does not automatically delete events already received by PostHog. Contact us to request their deletion.
• Google Ads cookies created by this integration last up to 90 days. Withdrawing Ad measurement removes its _gcl_* cookies and _gcl_ls browser storage and stops future signup events. This does not erase conversion data already received by Google; contact us for requests relating to previously collected data.

6) Changes

We will update this policy and the banner if tracking technologies change.

7) Contact

Email: sujatakumari@prepico.ai.

Concerns and complaints: write to sujatakumari@prepico.ai with the subject "Concern". We acknowledge within 2 to 5 business days and aim to resolve within 5 to 10 business days.

Prepico is operated by DataShastri, India (GSTIN 09EJYPK1192J1ZE).