Cookies and local storage

Without your Accept, the MuteHint website sets no cookies for visitors or customers. It keeps a few small items in your browser's local storage and session storage instead. Like cookies, these stay on your device, so this page lists every one of them. If you accept analytics, Google Analytics adds its two cookies. The one other cookie we set is for MuteHint staff only, and it is listed below too.

• Needed for the site to work: your login token, your analytics choice, and a note of the plan you picked.
• Only if you press Accept in the banner: analytics by PostHog and by Google Analytics.
• Always on: page-speed measurement by Vercel, which our code stores nothing in your browser for.
• Lemon Squeezy, our payment provider, may set its own cookies in its checkout.

This page covers the website. It does not cover the desktop app, which does not run in a browser.

Local storage (stays until it is removed)

• mh_token: your login token. It is saved when you log in and removed when you log out or when our servers no longer accept it. Without it you cannot stay logged in.
• cookie-consent: your choice in the analytics banner, saved as “accepted” or “declined”. It stays until you clear it, so the banner is not shown again.
• mh_pending_plan: the paid plan you picked before you had an account, with a coupon code if you entered one, and the time you picked it. It lets us send you to the right checkout after you sign up or log in. It is used for 30 minutes after you pick the plan, and it is removed when you reach checkout or the next time the site reads it after those 30 minutes.
• mh_payment_initiated: the time you opened the payment window, the plan you picked and, if you were adding days to a 15-Day Pass, when that pass was due to end. For the next 30 minutes your dashboard uses it to check with our server whether your plan has switched on, then removes it.
• mh_banner_closed: set when you close an announcement banner at the top of the site, so the same announcement is not shown to you again. It holds the banner's version number and nothing about you.
• mh_next_up: the conversation you told your dashboard you are preparing for: its kind, the name you gave it, its date and time, and whether you ticked your notes as ready. It is used to show a countdown on your dashboard. It stays in your browser, is never sent to us, and is removed when you clear it on the dashboard.

Cookies

• mh_staff: set only for MuteHint staff, after they pass a second sign-in step. It lets them open the staff pages for up to 12 hours. Visitors and customers are never sent it.

Session storage (cleared when you close the tab)

• mh_desktop_redirect and mh_desktop_state: set while you sign in to the desktop app with Google, so the website can hand you back to the app. They are removed when sign-in finishes.
• mh_view_as_token: set only for MuteHint staff, in the one tab where they open a customer's dashboard to help with a support request. It lasts 15 minutes at most.
• mh_offer_code: a discount code that an announcement banner, or a link you opened, offered. It is kept for this tab so the plan buttons can carry it to the checkout.
• mh_track_waiting: only if you accepted analytics. It holds one of the five steps listed under Analytics for the moment between your taking it and the analytics code loading, for example when you press Pay and leave for the payment page. It is removed as soon as the step is sent.
• mh_resend_until_… and mh_verify_lock_until_…: countdown timers on the email verification page, so a page refresh does not reset them. The name of each item ends with the email address you are verifying.

A banner on your first visit asks whether you accept analytics. If you press Decline, or do not answer, the PostHog code is never loaded and nothing is sent to PostHog. If you press Accept, PostHog starts and does the following:

• Page views: it records each page you open and when you leave it. The page address is sent without anything after the question mark, so details carried in a link, such as the email address on the email verification page, are not passed on.
• Clicks and forms: PostHog's standard automatic capture of clicks and form submissions is left on.
• Five steps: our code also tells PostHog when one of five things happens: the pricing page is opened, an account is created, a download button is pressed, the payment page is opened, and a payment arrives. With it go at most the plan, whether the download was for Mac or Windows, and that the account was made with an email address. Nothing that says who you are.
• Storage: PostHog is set to keep its data in your browser's local storage, not in cookies. It stores a random visitor ID there so that visits from the same browser can be counted together.
• Your account: our code does not tell PostHog who you are. It never passes your name, email or account ID to PostHog's identify function.
• Session recording: switched off in our code. PostHog does not record your screen or your visit.

Analytics data is sent to PostHog's servers. PostHog handles it under its own privacy policy. These analytics run on the website only. The desktop app does not include PostHog.

The same Accept also starts Google Analytics, which tells us how visitors find the website (for example a Google search or a link from another site) and which public pages they read. Google's code is loaded with every page, but until you press Accept it is told that all storage is refused and it is never started: it sets no cookies and sends nothing about your visit. If you press Decline, or do not answer, it stays that way.

• Pages counted: the public pages only. Your dashboard, account and other signed-in pages are not counted. Page addresses are sent without anything after the question mark.
• Cookies: Google Analytics sets two first-party cookies, _ga and _ga_…, with a random visitor ID. They last up to 2 years.
• Advertising: switched off: advertising storage, ad personalisation and Google signals are not enabled, and your account is never connected to Google Analytics.

Google Analytics data is processed by Google LLC under Google's privacy policy. Pressing Cookie settings stops it and removes the _ga cookies.

This website is hosted by Vercel, and every page loads Vercel Speed Insights. It measures how quickly the page loaded and reports that to Vercel, together with the page address, your browser, device type, operating system, network speed and country.

It is not connected to the analytics banner: it runs whether you accept or decline. Our code stores nothing in your browser for it. Vercel describes these measurements as anonymous and not tied to an individual visitor or IP address. See Vercel's description of what it collects.

Payments are handled by Lemon Squeezy. Every page of this website loads a small Lemon Squeezy script so that the payment window can open. The payment window itself is served by Lemon Squeezy from its own domain.

Lemon Squeezy may set its own cookies and stored data in that window and on its own pages. We do not set them, cannot read them and do not control them. They are covered by Lemon Squeezy's privacy policy.

Press Cookie settings at the bottom of any page (in the site footer, or at the bottom of your dashboard). Analytics stops at once, your earlier answer is forgotten, and the banner asks again: choose Accept or Decline. Until you accept again, nothing is sent to PostHog or Google Analytics, and the Google Analytics cookies are removed.

You can also clear this site's stored data in your browser (in most browsers: the padlock or site-settings icon in the address bar, then the option to clear site data or cookies). The banner then appears again on your next visit.

MuteHint is run by its founders and is not yet a registered company. Every purchase is sold and handled by Lemon Squeezy, the Merchant of Record. If you have a question about what is stored in your browser, or want analytics data about you deleted, write to us.