Cookie & Similar Technologies Policy

A cookie is a small piece of data that a website may store through your browser. ConfirmPH may also use other browser or device technologies that are not technically cookies but perform related functions, such as:

• local browser storage
• session storage
• browser databases
• cached application files
• service-worker storage
• authentication or session identifiers
• security identifiers
• preference records

analytics identifiers; and

push-notification subscriptions.

In this Policy, we refer to these collectively as cookies and similar technologies where convenient. Different technologies may behave differently and may have different privacy implications.

ConfirmPH generally uses browser and device technologies for the following purposes:

Strictly necessary: authentication, account security, sessions, fraud and abuse prevention, privacy-choice records, and core platform operation. Usually required.

Preferences: remembering selected interface, language, notification, or similar preferences. Usually optional where practical.

Analytics: understanding how ConfirmPH is used, diagnosing problems, measuring performance, and improving the service. Depends on applicable settings and lawful basis.

Application functionality: offline features, application caching, installed-app/PWA functionality, and other requested device features. Depends on the feature.

Push notifications: delivering notifications to a browser or device after the user enables notification permission. Optional.

ConfirmPH uses PostHog for product analytics and session recording. ConfirmPH does not use advertising-network cookies, cross-site retargeting pixels, or similar technologies to build advertising profiles across unrelated websites, and does not sell personal information to advertisers.

Some browser or device technologies are required for ConfirmPH to provide or secure requested Services. They may be used for purposes such as keeping authenticated users signed in, protecting login sessions, verifying account access, preventing unauthorized access, enforcing security controls, protecting forms and requests, limiting abusive activity, preventing fraud, remembering privacy choices, maintaining required legal-acceptance records, maintaining essential application state, and providing other core functionality requested by the user.

These technologies may remain active even when optional analytics or preference technologies are disabled, where permitted by applicable law. Blocking or deleting strictly necessary technologies may affect features such as login, account access, business dashboards, customer accounts, booking flows, booking confirmations, protected links, security checks, and other authenticated functionality.

ConfirmPH may use limited browser or device storage to remember choices so that users do not have to make the same selections repeatedly, for example, privacy or cookie choices, selected language, login-area preference, interface settings, selected filters, notification preferences, or similar usability settings.

Removing these records normally does not prevent you from using ConfirmPH, but some settings may return to their defaults.

ConfirmPH may use analytics and diagnostic technologies to understand how the platform performs and how its features are used. Analytics information may include pages or screens viewed, feature interactions, navigation events, general usage patterns, error events, performance information, browser category, device category, operating system, timestamps, technical identifiers, and anonymous or pseudonymous identifiers.

Where appropriate for authenticated product analytics, limited events may be associated with an account or pseudonymous account identifier. Analytics may help ConfirmPH identify technical problems, improve usability, understand feature adoption, measure performance, diagnose errors, and improve the Services.

ConfirmPH configures analytics so that it does not intentionally collect unnecessary private booking content, customer messages, passwords, authentication codes, uploaded private documents, payment credentials, or other sensitive information. Where analytics requires consent, ConfirmPH provides an appropriate way to accept, refuse, or withdraw that consent. Where analytics relies on another lawful basis, ConfirmPH provides the appropriate transparency and rights required by applicable law.

ConfirmPH uses PostHog for this. PostHog session recording is enabled, which captures how pages are used. ConfirmPH does not use it to collect passwords or authentication codes, and analytics can be switched off in Cookie & Privacy Settings, which stops further capture and recording on that browser.

Where ConfirmPH provides optional browser or device technologies, users can manage those choices through Cookie & Privacy Settings. Depending on the technologies actually enabled, the available choices may include Necessary only, Allow analytics, preference controls, and other optional privacy controls.

Strictly necessary technologies cannot always be disabled through ConfirmPH because doing so may make the requested Service unavailable or insecure. If you disable optional analytics, ConfirmPH stops future optional analytics collection on that browser according to the applicable implementation. Previously collected information may still be retained where permitted under the Privacy Policy and applicable retention rules.

Rather than a generic placeholder table, here is what ConfirmPH's production application actually stores on your device today. This list is the source of truth and is updated whenever the deployed technology changes.

• Signed-in session (confirmph_token): browser storage, provided by ConfirmPH: keeps you signed in between visits. Strictly necessary. Cleared when you sign out or your session expires
• Account cache (confirmph_auth_cache_v1): browser storage, provided by ConfirmPH: remembers your signed-in account and business details so the app does not have to re-fetch them on every page. Strictly necessary. Cleared when you sign out
• Cookie & Privacy choice (confirmph_cookie_pref_v1): browser storage, provided by ConfirmPH: remembers your Cookie & Privacy Settings choice so you are not asked again on every visit. Strictly necessary. Kept until you change your choice or clear your browser data
• Language preference (confirmph_lang_v1): browser storage, provided by ConfirmPH: remembers whether you last used ConfirmPH in English or Filipino. Preferences. Kept until you change it or clear your browser data
• Dismissed prompts (for example confirmph_install_dismissed_at, confirmph_getting_started_dismissed, confirmph_dashboard_shortcut_dismissed): browser storage, provided by ConfirmPH: remembers that you closed a specific prompt or card so it does not reappear every visit. Preferences. Kept until you clear your browser data
• Offline staff notes (the confirmph-notepad browser database, plus the confirmph-notepad-pending-v1 journal): browser database and browser storage, provided by ConfirmPH: temporarily holds a Business staff member's in-progress booking notes on their device so nothing is lost before it can sync. Application functionality. Cleared once the note is synchronized or manually cleared
• In-progress form drafts (for example a careers-application draft): browser storage, provided by ConfirmPH: saves a form you are filling out so you do not lose it if you close the tab. Application functionality. Kept until you submit or clear the form
• Interactive demo state: session storage, provided by ConfirmPH: remembers your place in an interactive product demo. Application functionality. Cleared when you close the browser tab

Demo business notice (confirmph_demo_ack_v1 followed by the demo business's ID): browser storage, provided by ConfirmPH: remembers that you acknowledged the notice shown on a demonstration business page, so the pop-up is not repeated (the permanent demo banner still shows). Preferences. Kept until you clear your browser data.

• Product analytics (PostHog): browser storage and cookies set by PostHog (posthog.com, api host us.i.posthog.com), the analytics provider ConfirmPH uses. These hold an anonymous device identifier and session information so ConfirmPH can see how features are used, diagnose errors and measure performance. PostHog is also configured to record sessions, which captures interactions with ConfirmPH pages. Analytics. Kept for the period set by the provider configuration, or until you clear your browser data or switch analytics off in Cookie & Privacy Settings

Turning analytics off in Cookie & Privacy Settings stops PostHog from capturing further events and ends session recording on that browser. ConfirmPH does not deploy advertising or cross-site retargeting technologies.

Some ConfirmPH features may temporarily store information locally on a user's device. For example, authorized Business staff may use an offline note or resilience feature that temporarily preserves information until it can be synchronized or recovered. Such information may contain actual customer or rental information.

Businesses and staff should therefore protect devices used for ConfirmPH, avoid unnecessary personal information in offline notes, use authorized staff accounts only, and synchronize or remove temporary information appropriately.

Locally stored information may be lost if a user clears browser or application storage, changes browser profiles, removes the application, clears site data, or otherwise deletes local data before synchronization. For more information about how personal information in offline records is handled, see the Privacy Policy.

ConfirmPH may use application caching or service-worker functionality to improve loading speed, support installed-app behavior, increase reliability, or make limited public content available offline. Cached content may include items such as application scripts, styles, icons, interface assets, and selected public resources.

Application cache is not the same thing as an ordinary tracking cookie. Clearing browser or application data may remove cached resources and require ConfirmPH to download them again. Private or authenticated information is not broadly cached for public offline access merely because application caching is enabled.

Push notifications are separate from ordinary cookie or analytics consent. If you choose to enable notifications, your browser, operating system, or device may create a notification subscription that enables ConfirmPH or its notification provider to send messages to that browser or device. This may include a browser or device endpoint, authentication information required for delivery, technical identifiers, subscription status, delivery information, or related technical data.

ConfirmPH may use notifications for supported matters such as booking activity, confirmations, changes, inquiries, reminders, incidents, support, account security, or other enabled Service notifications.

Enabling analytics does not automatically mean you have enabled push notifications. Likewise, enabling notifications does not automatically mean you have agreed to optional analytics. You can revoke notification permission through ConfirmPH settings where available, and/or your browser, operating-system, or device settings. Notification delivery is not guaranteed.

Some browser-facing functionality may be provided by third parties. Only third parties that actually place, read, or otherwise use cookies or similar client-side technologies in your browser or device are listed in this Cookie Policy. A company does not belong in this Cookie Policy merely because it provides server hosting, email delivery, database infrastructure, backend processing, or another service that does not interact with your browser or device in this way: those broader categories of service providers are described in the Privacy Policy.

Where a third-party browser technology is used, its own privacy or cookie practices may also apply.

The third-party browser technology ConfirmPH currently uses is PostHog, for product analytics and session recording. Its own privacy practices apply in addition to this Policy.

ConfirmPH currently does not use advertising-network cookies, cross-site behavioral advertising trackers, third-party retargeting pixels, or similar technologies to build advertising profiles across unrelated websites.

If ConfirmPH later introduces advertising or materially different tracking technologies, ConfirmPH will update this Policy, update the production technology inventory in Section 7, and provide or obtain any choices or consent required under applicable law before using those technologies where required. A future Policy update is not a substitute for consent where consent is legally required.

The application contains a switched-off advertising slot prepared for a possible future Google AdSense integration. In the current configuration no advertising identifier is set, so no advertising script is loaded and nothing is stored in your browser for advertising. It will not be switched on without first updating Section 7 and providing any choice or consent the law requires.

The easiest way to manage non-essential ConfirmPH technologies is through Cookie & Privacy Settings where available. You may also use browser or device settings to remove site data, block cookies, clear stored information, remove cached data, change notification permissions, or restrict some browser technologies.

Removing strictly necessary site data may sign you out, invalidate sessions, reset preferences, remove unsynchronized local information, or require ConfirmPH to rebuild cached resources. Browser controls are supplemental and are not the only mechanism for managing optional consent-based technologies where ConfirmPH provides its own consent interface.

ConfirmPH may store a limited record of your cookie or privacy selection so that you do not have to answer the same question every time you visit. That record may include your selected privacy choice, applicable preference version, timestamp, or related technical information needed to remember the choice. This record is itself treated as necessary because it is used to remember and respect your privacy preference.

ConfirmPH may update this Cookie & Similar Technologies Policy if browser or device technologies change, analytics practices change, optional features are added or removed, service providers change, legal requirements change, or the Services evolve. The Last updated date identifies the latest revision.

If a change introduces processing that requires new consent or another specific user choice under applicable law, ConfirmPH will provide the appropriate choice rather than treating continued use of the website as automatic consent.

Cookies and similar technologies may involve the processing of personal information. For information about lawful bases, data recipients, international processing, retention, data-subject rights, security, deletion, analytics, service providers, and privacy requests, see the ConfirmPH Privacy Policy.

For questions about this Policy, privacy settings, cookies, analytics, or related technologies, use the official ConfirmPH Privacy Request, Contact, or Support page.

ConfirmPH uses browser and device technologies to keep accounts secure, keep users signed in, remember privacy choices, remember limited preferences, support application functionality, support limited offline behavior, deliver notifications when enabled, and understand how the Service performs where analytics is enabled or otherwise lawfully used.

Necessary technologies help ConfirmPH work securely. Push-notification permission is separate from analytics or cookie consent. ConfirmPH does not currently use advertising-network cookies or cross-site retargeting trackers, and does not sell personal information to advertisers.

Section 7 above lists exactly what ConfirmPH's production application stores on your device today, who provides it, why it is used, and how long it remains.