Cookie Policy

Cookies are small text files a website stores in your browser. We also use closely related technologies — your browser's local storage and session storage — to remember your choices. This policy covers all three and refers to them together as “cookies” unless a distinction matters.

We use them sparingly: to keep you signed in, to remember your language and theme, and — only with your consent — to understand how the product is used and to remember a referral link you arrived from.

When you first visit, our cookie banner asks for your choices. We use a default-deny model: until you choose, only strictly necessary cookies are set. Analytics and marketing stay off until you turn them on.

• Necessary. Required for sign-in, session, language, theme, and to record your cookie choices. These cannot be turned off — the app can't run without them.
• Analytics. Product analytics and error monitoring so we can fix what's broken and ship what helps. Off by default; strictly opt-in.
• Marketing. Remembers a referral link you arrived from so we can credit the person who invited you. Off by default; strictly opt-in.

These are always active because the service depends on them:

• __session, __client_uat, __clerk_db_jwt (and suffixed variants) — set by our authentication provider, Clerk, to keep you securely signed in.
• readmaster-locale — your interface language, so the right language renders on the server before the page loads.
• readmaster-theme — your selected theme.
• cookie_consent — your cookie choices, so we can honour them on every request and know not to ask again.

These are only set after you grant Analytics consent:

• PostHog (ph_*) — privacy-conscious product analytics. PostHog does not load at all until you opt in, and stops capturing immediately if you withdraw consent.
• Sentry — error monitoring and occasional session replay to diagnose crashes. Initialized on the client only after you opt in.

Withdrawing Analytics consent stops new analytics events and recording right away.

• waitlist_ref — if you arrive via a referral link (a ?ref= address), this remembers the code for up to 30 days so the right person gets credit when you sign up.

This cookie is only written after you grant Marketing consent. Without consent we still let a referral link prefill the form for that visit, but nothing is stored, and we clear the cookie if you later withdraw consent.

Some preferences live in your browser's local or session storage rather than in cookies. They stay on your device and are not sent to our servers automatically:

• Local storage — readmaster-language, readmaster-theme, readmaster-theme-mode, and cookieConsent mirror your language, theme, and consent choices for fast loading.
• Session storage — short-lived interface state, such as dismissed in-app notices and a safeguard that prevents sign-in redirect loops. This is cleared when you close the tab.

When paid subscriptions launch, our payment provider (Stripe) may set fraud-prevention cookies on the checkout page. These are necessary to process a payment securely and are only set if and when you begin a checkout. Checkout is not yet active.

You can change your choices at any time from the Cookie settings link in the footer — or, when signed in, from the Privacy section of your account settings — or through your browser's settings. See our Privacy Policy for how we handle the data these cookies relate to.

Questions about cookies go to [email protected].