What the site stores
What the site sets
Cookies: none. No page on pistasocial.com sets a cookie, ours or anyone else’s. These are the only things the site keeps in your browser. The first four are strictly necessary, so the site keeps them without asking:
| Name | Kind | What it does | How long |
|---|---|---|---|
tsr-scroll-restoration-v1_3 | sessionStorage, every page | Remembers how far down each page you had scrolled, so Back returns you to the same place. It holds scroll positions and nothing else. | Until you close the tab |
pista.consent | localStorage, every page | Remembers whether you accepted or rejected analytics, and when, so the banner does not ask on every page. It holds your answer and nothing else. | 12 months, then the banner asks again |
sb-…-auth-token | localStorage, claim pages | Keeps you signed in while you claim your profile. | Until you sign out or clear this site’s data |
pista.claim.face.… | sessionStorage, claim pages | Remembers your answer to one claim question until you submit the next. | Until you close the tab |
ph_… | localStorage and sessionStorage, every page, only if you accept analytics | PostHog’s random identifier for this browser and the state of the current visit, so page views and clicks can be counted. It is not linked to your account, name or email. | Until you withdraw, which clears it, or clear this site’s data |
The claim pages are the ones whose address starts /claim/, and they store nothing until you start claiming a profile. None of the strictly necessary entries identifies you to anyone else, is shared, or is used to track you; each exists only so the page you asked for works.
Analytics, only if you accept
The first time you open the site, a banner at the foot of the page asks whether Pista may count how the site is used. Accept and Reject are the same size, and the page works the same whichever you choose. Nothing for analytics loads before you answer, and nothing loads if you reject.
If you accept, the site loads PostHog, which Pista uses for analytics in the app too, from its EU cloud in Frankfurt. It counts the pages you visit, the links and buttons you click (without their text), and a few named moments, such as starting and completing a profile claim. It sends no name, email address, handle or account identifier, records no session replays, and PostHog is set to discard your IP address.
To change your answer, use Cookie settings here or at the foot of every page. Withdrawing stops any further collection and clears what is stored in your browser; to delete what was already sent, write to luka@pistasocial.com.
What the site does not do
- No advertising, social or marketing scripts on any page.
- The waitlist form sends the email address you type to us and stores nothing in your browser.
- The site serves its own typefaces from pistasocial.com, so loading a page sends nothing to Google Fonts or any other font provider.
- The site is hosted by Vercel, which handles each request. Vercel sets no cookies on pistasocial.com.
- The sign-in return page,
/auth/callback, never shows the banner and never loads analytics.
What the Privacy Notice says
From the Privacy Notice, section 12. Website storage, analytics, and auth callbacks
The initial website may use strictly necessary storage or similar technology to operate requested features. It sets no cookies, and it serves its own typefaces, so loading a page sends nothing to a font provider.
Website analytics is provided by PostHog and is off until you agree to it. A banner at the foot of the page asks, with Accept and Reject given equal weight. Nothing for analytics loads before you accept, and nothing loads if you reject. If you accept, PostHog keeps a random identifier in your browser's storage, under names beginning ph_, and the site sends the analytics described in section 2, tagged with the website's address. It sends no name, email address, handle, or account identifier, records no session replays, and PostHog is set to discard your IP address. The site remembers your answer in your browser for 12 months and then asks again. You can change it at any time with Cookie settings at the foot of every page. Withdrawing stops any further collection and clears what is stored in your browser; to delete what was already sent, contact us. Marketing technology is not used on the website. The site's Cookies page, https://pistasocial.com/cookies, lists what it stores.
In the mobile app, optional product analytics is provided by PostHog and is off until you agree to it. The app asks during onboarding and records your answer on the device. Nothing is sent before you answer, and nothing is sent if you refuse. You can change your answer at any time in Settings → Privacy → Analytics; turning it off stops sending at once and discards anything not yet sent. If you allowed analytics, the app may ask you a short survey once. Your answers, including any words you type, are sent with your analytics to PostHog in the European Union, never with your name or email.
Under the Privacy and Electronic Communications Regulations (PECR), Pista stores or reads information on your device only where it is strictly necessary for a service you asked for, such as keeping you signed in, or with your consent, such as analytics.
The /auth/callback fallback does not display, persist, or application-log callback parameters and loads no analytics or error-reporting SDK. Hosting infrastructure may process the requested URL in restricted operational logs; access and retention must be limited.
Clearing it
Closing the tab clears the sessionStorage entries. Signing out, or clearing this site’s data in your browser’s settings, clears the sign-in too; clearing the site’s data also clears your analytics answer, so the banner asks again. Questions go to luka@pistasocial.com.