Cookies & tools
In short
- Essential storage keeps Gary working and is always on.
- Visitor analytics, advertising measurement and embedded videos are off until you choose them.
- Your answers and reflections are never sent to analytics or advertising tools.
- Change your choice any time with Cookie choices in the footer.
This summary helps you find your way. The full text below is what applies.
This Policy explains what cookies and similar technologies Gary uses, and also serves as the always-current, named register of the third-party tools and service providers behind Gary. It is part of our Privacy Notice; terms used here have the meaning given there.
1. What cookies and similar technologies are
Cookies are small text files placed on your device by a website. "Similar technologies" include browser local storage and comparable mechanisms that store or read information on your device. We use the umbrella term "storage" below.
2. Strictly necessary storage (no consent required)
These make the app work and deliver the features you ask for. They are not used for advertising or cross-site tracking.
| Storage | Purpose | Duration |
|---|---|---|
| Authentication / session (Firebase) | Keeps you signed in and secures your account | Browser storage until you sign out |
| Consent and preferences | Remembers the choices you made, including a cookie that remembers if you rejected optional cookies, without any tracking identifier (cookie gary_visitor_consent) | 30 days |
| Sign-up progress | Remembers your place and answers in the sign-up questions on this device, so you can pick up where you left off | Browser storage, 7 days |
| Payment (Stripe) | Secure checkout and fraud prevention when you buy a subscription | Only at checkout: __stripe_mid up to 1 year, __stripe_sid 30 minutes |
Your reflections are not stored on your device. They are stored on our servers only if you consent to health-data storage (see the Privacy Notice). Content from the earlier version of Gary may still exist in your browser's local storage; it is not uploaded automatically, and clearing your browser data removes it.
3. Optional analytics (only with your consent)
We use PostHog EU Cloud, hosted in Frankfurt, to understand how Gary is used, compare interface variants and investigate technical errors. Nothing is collected until you opt in. There are two separate choices:
- Visitor analytics, before signup. Visitor analytics is optional and starts only after a fresh choice in Cookie choices. A secure HttpOnly first-party cookie (gary_visitor_consent) holds a random consent token for up to 30 days. PostHog EU Cloud receives visits, bounded campaign tags and numeric ad identifiers, device categories, sessions, time, scroll, content-free clicks, loading performance and questionnaire progress. We also measure displayed subscription plans, prices, currencies, pricing groups, how the country was selected, quote readiness and checkout interactions. If the required account or checkout analytics choice is also current, server-confirmed initial subscription purchases include the actual amount and currency. Browser actions are not proof of payment. No questionnaire answers, results, name, email, full URL, raw IP or billing address are sent. This choice does not grant advertising or account analytics, and does not join identities across devices. With visitor analytics enabled, a random sample of visits includes masked recordings of approved public navigation, subscription options and order summaries in PostHog EU Cloud, for up to 30 days. Text and inputs are masked; answers, results, identity and payment fields are blocked. We measure displayed plans, prices, currencies, pricing groups and checkout interactions, never raw IP or billing address. Withdrawal stops new recording and queues deletion; provider cleanup is asynchronous.
- Account analytics, inside Gary. If you agree to the analytics choice in Gary, we collect fixed usage categories, experiment variants, technical error categories and masked session replay. Your account identifier links sessions, so this is pseudonymous personal data. Reflection content, mood values, goals, memories, questionnaire answers, audio and safety classifications are never included. Analytics session state stays in browser memory.
Our server does not forward your IP address, cookies or authentication token to PostHog. Analytics events are kept for 24 months and session replays for 30 days; provider cleanup can take additional time. We do not use advertising or cross-site tracking cookies. Optional advertising measurement (section 4) works from our servers, and embedded videos (section 5) load only if you agree.
4. Optional advertising measurement (only with your consent)
If you turn on advertising measurement (in Cookie choices, with Accept all, or in Gary’s privacy settings), our servers tell Meta and Google Ads when someone who came from one of their ads registers, starts checkout or subscribes, so we can see which campaigns work. No advertising pixels or cookies run on our pages. To match an event to an ad, Gary keeps the ad click identifier in your browser for 30 days, and we keep event records for 30 days. Events never include your email, account ID, IP address, questionnaire answers or anything you write. Nothing is sent until you opt in, and you can turn it off at any time.
5. Embedded videos (only with your consent)
Some website pages show videos from creators, played through TikTok’s embedded player. Nothing loads from TikTok until you agree, either for one video or by turning on Embedded videos in Cookie choices (Accept all also turns it on). Once a video loads, TikTok may set cookies and receive information about your visit under its own privacy policy. You can turn this off in Cookie choices at any time.
6. Register of third-party service providers
This is the current, named list of the third-party providers used by Gary. Our Privacy Notice describes how each of them processes your data.
| Provider | What it does | Where | Consent-gated? |
|---|---|---|---|
| Google Cloud | Storage of your content, encryption keys and backups; app hosting | Netherlands | No (necessary) |
| Google Firebase Authentication | Sign-in | United States | No (necessary) |
| Google Vertex AI (Gemini) | AI-generated replies | EU multi-region | Yes (AI choice) |
| Google Cloud Speech-to-Text | Turning dictation into text | EU endpoint | Yes (speech choice) |
| PostHog | Visitor and account analytics, interface experiments, masked replay, guides and news emails | EU (Frankfurt) | Yes (analytics choices) |
| RevenueCat | Subscription management | United States | No (necessary for subscriptions) |
| Stripe | Payment processing | Ireland; may transfer to the United States | No (necessary for payment) |
| Meta | Ad measurement, sent from our servers | Ireland; may transfer to the United States | Yes (advertising measurement) |
| Google Ads | Ad measurement, sent from our servers | Ireland; may transfer to the United States | Yes (advertising measurement) |
| TikTok | Embedded video player on website pages | See TikTok’s privacy policy | Yes (embedded videos choice) |
7. Changes to this register
We keep this register up to date. If we add, remove, or change a provider in a way that affects your data, we update this document (and, where a new consent is needed, we ask you first). The "Last updated" date shows the current version.
8. Your choices
- In the app: manage your analytics, AI, speech and storage choices any time in Profile & settings > Privacy & data.
- On the website: Use Cookie choices to withdraw at any time without restricting Gary. Withdrawal stops new collection and queues deletion of the visitor profile, events and recordings. The fixed 30-day visitor expiry and linked account deletion also queue cleanup. New recordings have a maximum 30-day retention; provider cleanup is asynchronous, can take days and is retried. Clearing cookies removes the local token but does not immediately erase provider data; expiry cleanup still applies. Contact iod@pleso.me for help.
- In your browser: you can clear or block storage via your browser settings. Clearing storage will sign you out and remove any content from the earlier version of Gary kept in your browser. Blocking strictly necessary storage may stop parts of Gary working.
9. Contact
Pleso Therapy sp. z o.o., ul. 12 Lutego 25/7, 82-300 Elbląg, Poland · Data Protection Officer: iod@pleso.me · Questions about Gary: hello@pleso.me