Cookie policy
Browser cookie policy and analytics choices
Last updated: October 19, 2026.
This Cookie Policy applies to the Art Says Hi website and browser scanner. It does not describe mobile app SDK behavior. PostHog analytics and session replay for the website, and AdMob, Firebase Analytics, Google Analytics 4, and Sentry disclosures for the iOS and Android app, appear in the Privacy Policy.
What the website stores
The website stores one versioned analytics choice for optional analytics and session replay. Essential local preferences and browser reading history may also be stored so the interface can remember your choice and reopen written results. When analytics is enabled, PostHog keeps namespaced first-party storage and a first-party cookie for its analytics identifiers; rejecting analytics removes the optional PostHog identifiers where the browser allows it. Feedback drafts, pending revisions, and accepted-feedback receipts are kept in this browser so you can continue editing, check delivery, or edit accepted feedback. A receipt keeps the submitted message, category or rating, reason, optional reply email and contact permission, product context, result version, screen, revision, Gateway references, and acceptance time until you discard it or clear this browser's site data. The browser scanner does not store the original image or base64 data in reading history.
Performance measurement and optional analytics
PostHog, in the EU region, measures page views, page-leave, Web Vitals, clicks, changes and submissions on page controls, heatmap interactions, dead/rage-click measurements, and a small set of fixed usage events on eligible production visits, and it records session replays. This runs by default until you save a rejection or a privacy signal (Global Privacy Control or Do Not Track) turns it off. The footer reopens the choices, which control Analytics and Session replay independently; turning Analytics off also turns Session replay off, and a saved choice has no application-set expiry.
Session replay records broad visible page content and public imagery, but excludes passwords, authentication and payment fields, tokens, credential-bearing URLs, console output, and request or response headers and bodies. The selected scanner image is excluded from replay and never becomes an analytics event. PostHog's current free plan keeps replays available for 30 days.
Consent-gated browser Sentry sends error diagnostics and samples 5% of browser traces with its replay feature disabled pending captured-envelope privacy verification. It remains separately opt-in and is not enabled by the automatic PostHog default. Error events omit request details and raw exception messages; traces may include page path and browser/device context.
Worker operational diagnostics run independently of browser consent to support the service: Sentry receives Worker errors, 5% of Worker traces, and terminal scan/feedback logs with outcomes, duration, bounded request and Gateway references, and token counts only when the Gateway supplies them. Worker telemetry excludes request bodies, submitted image media, query strings, headers, and raw exception messages.
Cloudflare, which hosts this site, may also record cookie-free page views and performance timings independently of your choice, and whether an edge beacon is injected for a given visit is not asserted here. If you reject analytics, optional PostHog and browser Sentry stay off or are cleared; Global Privacy Control and Do Not Track are treated as a rejection and are never saved as a choice. Rejection does not delete hosting logs, the gateway archive, or records a provider already holds.
Change your choice
Use the privacy choices control in the footer to review the current choice. The settings dialog lets you turn Analytics and Session replay on or off independently, choose Reject all, or Save your changes. You can also clear the site's local storage in your browser. Clearing local storage may reset the choice prompt and local reading history.
Third party information
Cloudflare and optional services may process technical information under their own policies. Read the Privacy Policy for the complete website and mobile app disclosure.