Cookie Policy
Last Updated: 17 July 2026
1. Scope
This policy explains storage and access technologies used on codealive.ai and app.codealive.ai. It should be read with our Privacy Notice. "Cookie" below includes browser cookies and local storage used for the same purpose.
2. Your Choice
Optional analytics does not start until you select Accept analytics. You may select Reject non-essential without losing access to the website, blog, newsletter, signup or product. Cookie settings remains available in the landing footer and the app navigation footer so you can change your choice.
The English and Russian blog newsletter consent checkbox and confirmation email are separate from cookie consent. Subscribing does not enable analytics or product marketing.
3. Strictly Necessary Storage
| Name | Purpose | Duration |
|---|---|---|
codealive_consent |
Stores only consent categories, policy version and update time across CodeAlive subdomains | 180 days |
| Authentication and security cookies | Login, session continuity, CSRF protection and OAuth completion | Session or as shown in the app settings |
| Language and theme preferences | Remembers choices requested by you | Up to 1 year |
The consent cookie does not contain an email address, User ID or PostHog ID. Cloudflare Turnstile on a newsletter form is treated as a strictly necessary anti-abuse technology; it may process limited device and network information to distinguish legitimate requests from automated abuse.
4. Optional Analytics
With your consent, PostHog uses ph_* browser storage across codealive.ai and app.codealive.ai to maintain one pseudonymous identity, count page and product events, and provide privacy-masked session recording. We retain analytics data for up to 12 months unless a shorter setting applies.
Before consent, CodeAlive does not initialise PostHog, send PostHog network requests, create a PostHog browser identity, record sessions or hand off acquisition attribution. PostHog-dependent feature flags use the safe value false; product-critical features are delivered by the app backend.
5. Changing or Withdrawing Consent
When you withdraw analytics consent, we stop capture and session recording, reset the PostHog identity and remove PostHog cookies and local storage accessible from the current CodeAlive origin. For an authenticated User, the app also records the updated choice on the server. Withdrawal does not erase historical processing that was lawful before withdrawal.
6. Changes and Contact
We will request consent again after a material change to cross-domain analytics or the categories in this policy. Questions may be sent to security@codealive.ai or CodeAlive Ltd, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, UK.