1. What Are Cookies & Why We Use Them

Cookies are small text files placed on your device when you visit a website. They let the site remember your actions and preferences — your login state, your theme choice, your consent decision — so you don't have to re-enter them on every page.

We also use similar technologies such as localStorage for the same purposes (for example, storing your cookie consent choice and theme preference). We use these technologies for four things only: keeping the service secure and functional, remembering your preferences, understanding how the product is used (with consent), and processing payments at checkout.

2. Cookies We Use

Name	Provider	Type	Purpose	Duration
rappel_session	Rappel (app)	Strictly necessary	Keeps you signed in to the application	Session
csrf_token	Rappel (app)	Strictly necessary	Protects forms against cross-site request forgery	Session
__cf_bm	Cloudflare	Strictly necessary	Bot detection and security filtering	30 minutes
cf_clearance	Cloudflare (Turnstile)	Strictly necessary	Remembers that you passed the Turnstile bot challenge	Up to 1 year
rappel_cookie_consent	Rappel (localStorage)	Strictly necessary	Stores your cookie consent choice	Until cleared
ph_phc_*_posthog	PostHog (EU)	Analytics — consent required	Session tracking, page views, feature usage, and session replay. First-party only; no cross-site tracking; stored on EU servers.	1 year
theme	Rappel (localStorage)	Preference	Remembers your light/dark theme choice	Until cleared
Payment provider cookies	Paddle / Razorpay / Dodo Payments / Stripe	Third-party — checkout only	Payment session handling and fraud prevention; set only on checkout pages by the payment provider applicable to your purchase	Session / varies

Strictly necessary cookies cannot be disabled — without them you cannot log in, submit forms safely, or pass bot protection. Analytics cookies are set only after you consent. Cloudflare cookies are set by our hosting and security provider on both the marketing site and the app.

3. How Consent Works

Marketing website (rappelhq.com) — a consent banner is shown on your first visit. Analytics (PostHog) stay completely off unless you click Accept. If you decline — or simply dismiss the banner — no analytics cookies are set and no analytics data is sent.
Application (app.rappelhq.com) — when you sign up you agree to our Terms of Service and Privacy Policy, which include processing of product usage analytics through PostHog (EU-hosted) as part of providing and improving the service. No separate cookie banner is shown inside the app.

4. Managing or Withdrawing Consent

You can change your analytics consent for this website at any time right here. The change applies immediately — no reload needed:

Your current choice: Not set yet

You can change this at any time. Declining stops analytics immediately and removes analytics identifiers from this device.

Withdrawing consent stops all analytics capture immediately and removes PostHog identifiers from your device. To stop in-app analytics processing, contact us at privacy@rappelhq.com or delete your account.

5. Disabling Cookies in Your Browser

Every major browser also lets you block or delete cookies globally:

Chrome — Settings → Privacy and security → Third-party cookies / Site settings
Firefox — Settings → Privacy & Security → Cookies and Site Data
Safari — Settings → Privacy → Manage Website Data
Edge — Settings → Cookies and site permissions

Note that blocking strictly necessary cookies will prevent you from logging in to the Rappel app and may break form submission and bot protection on this site.

6. Contact

Questions about our use of cookies? We may update this policy from time to time — changes are posted on this page with a revised “Last updated” date at the top.

Rappel (rappelhq.com)

Privacy enquiries: privacy@rappelhq.com

See also our Privacy Policy and Terms of Service.