- Funnel recordings and offers
- With visitor analytics enabled, a random sample of visits includes masked recordings of approved public navigation, subscription options and order summaries in PostHog EU Cloud, for up to 30 days. Text and inputs are masked; answers, results, identity and payment fields are blocked. We measure displayed plans, prices, currencies, pricing groups and checkout interactions, never raw IP or billing address. Withdrawal stops new recording and queues deletion; provider cleanup is asynchronous.
- Visitor analytics
- Pages you visit, where you came from and your device type, with a random ID kept for 30 days (our analytics service, in the EU). If you subscribe, also the amount you paid.
- In your account
- How you use Gary, with masked session replays, payments and AI service checks.
- Never sent
- Your answers, anything you write, your name, email address or card details.
Advertising measurement · Meta and Google
I agree to optional advertising measurement as described above, including sending my SHA-256 email hash, browser user-agent and available client IP through PostHog to Meta for Lead, checkout and first paid subscription matching. Both analytics and advertising choices are required. I can withdraw at any time. For Meta, when both analytics and advertising are accepted in Cookie choices under this notice before payment, Gary sends Subscribe as soon as the payment provider confirms the first successful paid subscription, even if account registration or verification is unfinished. I also agree to the separate Meta SubscriptionRenewal measurement for eligible paid web renewals, using my email hash and still-valid consented identifiers, without browser IP or user-agent. Current account analytics and advertising consent must predate the payment; old or guest checkout choices do not authorize renewals.
Optional Meta and Google advertising measurement
Pleso Therapy sp. z o.o. measures Gary registrations, checkout attempts and confirmed first paid subscriptions for Meta and Google Ads only with your current advertising consent. Both providers receive dedicated events through PostHog EU Cloud in Frankfurt. These routes additionally require a separate current analytics choice. For Google and account events this is account consent; the pre-account Meta route below uses the choices recorded in Cookie choices. Email marketing, visitor analytics and account analytics are separate choices. Refusing does not limit Gary.
Subscribe means a confirmed first paid subscription, with its actual amount and original currency. Trials, renewals, free access, refunds, pending payments and browser success messages are excluded. Registration and checkout have no payment amount. Events contain a random deduplication identifier, event type and time, a fixed Gary website address and the destination's conversion identifier. Meta receives fbp and, if available, fbc; Google receives an available gclid. We do not send your name, readable email, Gary account identifier, answers, writing, mood, therapy details to either advertising provider. This choice does not enable remarketing or personalized advertising.
With both current analytics and advertising choices under this notice, Gary sends a Lead after your first email capture, InitiateCheckout for a new checkout attempt, and Subscribe for a confirmed first paid subscription. For these three events, Gary trims and lowercases your existing email and computes a SHA-256 hash on the server. PostHog relays the hash, available browser and ad-click identifiers, the browser user-agent and an available original client IP address to Meta to help match the event to an ad interaction. These are personal data, not anonymous data; Meta may match them to an account. Request metadata comes from the consented visit, never the payment webhook or a later visit. Google and registration events do not receive the email hash, browser IP or user-agent. This does not subscribe you to marketing email. Old choices do not authorize this use: a fresh choice is required. For Meta, when both analytics and advertising are accepted in Cookie choices under this notice before payment, Gary sends Subscribe as soon as the payment provider confirms the first successful paid subscription, even if account registration or verification is unfinished. Completing registration later does not send another Subscribe for that payment. The original choices must still be valid when Gary submits the event. If you have since claimed the account, withdrawal there also stops pending submissions. Google continues to require a verified account and current account choices. Later consent alone never backfills an earlier event. You can withdraw using Cookie choices or Settings > Privacy. The pending-submission and provider-retention limits below also apply to these matching fields.
Before account consent, an optional unchecked choice can remember the ad-click identifier in this browser for up to 30 days. It is stored only after that choice, with its notice version, language, text hash and decision time. This allows an email sign-in link opened in the same browser to retain attribution; another device cannot recover it. This device-storage choice alone sends nothing to advertising providers and does not grant account advertising consent. Uncheck it or use Reject optional cookies to clear this pending storage. Identifiers are not put into sign-in emails or sent to Firebase for this purpose.
After current account advertising consent, Gary can use the saved identifier or one present on the current page and a random browser identifier. Browser storage expires at its original 30-day deadline without renewal on reads. Server attribution and conversion metadata are kept for up to 30 days after the account grant or event; scheduled cleanup may run later. Withdrawal or sign-out clears browser advertising storage. Settings > Privacy lets you withdraw account advertising consent. New and still-pending Gary submissions stop; withdrawal cannot recall events already handed to PostHog, Meta or Google. Policy changes require a fresh account grant. A grant after a purchase does not backfill that purchase.
PostHog receives the relevant click identifiers and uses the pseudonymous account identifier for delivery and account erasure, but the account identifier is never forwarded to Meta or Google. Ordinary analytics, AI diagnostics, visitor events and session recordings are not forwarded to advertising providers. PostHog's current event window is seven years; account deletion requests asynchronous profile and event erasure. Meta's Business Tools Terms allow event-data retention up to two years. Google has its own retention and deletion rules; Google says it cannot identify individual conversion-tracking data for a user deletion request. Gary cannot promise that account deletion or withdrawal erases events already received by an advertising provider.
Contact iod@pleso.me for data requests. Provider information: https://www.facebook.com/legal/technology_terms, https://www.facebook.com/privacy/policy/, https://policies.google.com/privacy and https://support.google.com/google-ads/answer/10769131.
Pre-account permission and matching data remain attached to the original checkout for up to seven days; reads and registration do not renew that period. PostHog receives a random funnel identifier for delivery and erasure, never forwarded to Meta. Cookie choices lets you withdraw before registration. This notice does not broaden an older choice: payments under older notices keep their original account-verification requirements and are not resent using new consent.
Optional paid web renewal measurement
With current account analytics consent and advertising consent under this new notice, both recorded before payment, Gary sends a separate SubscriptionRenewal event through PostHog to Meta when RevenueCat confirms a successful paid renewal of your web subscription and Gary verifies current paid access. For the Stripe checkout, Gary also independently verifies a paid recurring invoice and its successful charge; a notification or active subscription alone is not payment proof. It uses the actual amount, currency and original payment time, with the same random event identifier on retries. This is an automatic system event, not a website visit; it has no visit URL, browser IP or user-agent. Meta may receive the SHA-256 hash of your account email and still-valid consented browser or ad-click identifiers. Provider transaction IDs, subscription names and account identifiers are not forwarded to Meta.
This event is separate from the first-payment Subscribe described above and is never sent to Google. It excludes free trials and their first paid conversion, zero-value access, failed or pending payments, mere active status, extensions, App Store and Google Play purchases. Stripe plan changes, prorations, initial invoices, ambiguous charges and invoices without a verified successful recurring payment are excluded. Renewed access after a lapse may count as a paid renewal; the event does not prove uninterrupted retention or ad attribution. Older consent, a guest checkout choice or consent granted after payment does not authorize a renewal event. No past renewals are backfilled. Withdrawal and retention limits above apply. Refusal does not affect your subscription or access to Gary.
Written by Anna · Chief of Therapy, Pleso Therapy