Cookie Policy
Last updated: 2 June 2026
The short version
We use a tiny amount of essential storage to keep you signed in and remember your preferences. With your permission, we also count anonymous visits so hosts can see how their guest pages are used. We do not use advertising cookies, social-media trackers, or third-party analytics. There's a cookie banner on first visit and a Cookie preferences link at the bottom of every page so you can change your mind any time.
1. What we mean by "cookies"
"Cookies" in this policy is shorthand for all the small pieces of data we (and our service providers) store on your device — actual HTTP cookies, browser localStorage, and sessionStorage. Different storage types have different rules under UK PECR and UK GDPR, but the practical effect is the same: a bit of state stays on your device between visits.
2. What's stored, and why
Essential (always on)
These are strictly necessary for the product to work, so they're exempt from consent under PECR and UK GDPR. If you block these you won't be able to sign in or use core features.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| sb-* (Supabase) | Cookie | Sign-in session | Up to 1 year |
| ga_consent | Cookie | Remembers your cookie choice | 6 months |
| ga-theme | Cookie | Light / dark theme | 1 year |
| ga_help_sessions, ga_sales_sessions | localStorage | Your previous chats with our help / sales assistants on this device | 30 days |
| pendingPromoCode, pendingClaimToken | sessionStorage | Carries a voucher code or demo-claim token through signup | Until tab closes |
| phona_chat_history_* | localStorage | Your chat history on a guest page, so you can come back to it | 30 days |
Analytics (you choose)
First-party only — no third-party analytics, no Google Analytics, no Facebook Pixel, no profile building. With your permission, we count anonymous visits so the host running the property can see how their guest page is being used. No row in our database has a name, email, or anything tied to your real identity.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| phona_vid | localStorage | Anonymous random visitor ID so the same device isn't counted twice | Until you clear browser data |
If you reject optional storage in the banner, the analytics visitor ID is never written and the analytics endpoints are never called. Do Not Track is also honoured — even if you accept, browsers with DNT enabled won't send analytics events.
3. Cookies from third-party services
A few service providers we rely on may set cookies on their own domains when you interact with their parts of the product:
- Stripe — when you're on the subscription / billing pages. Used for fraud prevention and payment processing. See Stripe's privacy notice.
- Google — when you sign in with Google. See Google's privacy notice.
For the complete list of service providers we use and the data we share with each, see the Sub-processors section of our Privacy policy.
4. Things we deliberately do NOT use
- Advertising cookies — we don't run ads and we don't share data with ad networks.
- Social-media trackers — no Facebook Pixel, no LinkedIn Insight Tag, nothing similar.
- Third-party analytics — no Google Analytics, no Mixpanel, no Segment.
- Cross-site profile building — we never sell or share your data for cross-site personalisation.
5. Changing your mind
You can withdraw or grant consent at any time:
- Click Cookie preferences at the bottom of any page on this site.
- Inside the app: Settings → Account → Privacy → Open cookie preferences.
- Clear cookies for
guestassistant.appin your browser. Next visit will show the banner again.
Most browsers also let you block all cookies or clear them on exit — Chrome, Firefox, Safari and Edge all have settings panels for this. If you block essential cookies you won't be able to sign in.
6. Updates to this policy
If we add a new storage item or change how we handle consent we'll update the date at the top, and — if the change is material — re-prompt the banner so you can make a fresh choice.
7. Questions
Send us a note via the contact page.