Where this policy applies
Vinchy Company Inc. uses browser storage and related technologies on FileToWeb’s website and application. This policy covers our technologies, including applicable embedded functionality; it does not describe every technology on a customer-operated website. FileToWeb-hosted document routes do not enable our optional browser analytics. Hosting and security systems still receive requests needed to deliver content.
Necessary storage and preferences
Supabase authentication cookies (sb-…): authenticate your account and refresh your session on the application; duration follows the authentication session and refresh lifecycle. CSRF protection (csrfSecret): protects application requests for the browser session. These are necessary to provide requested account functionality.
Language, theme, layout, and workspace preferences (including lang, theme, layout-style, sidebar:state, and last_team_slug) remember choices on applicable pages. Depending on the feature, they use cookies or local storage and remain for the configured preference period or until cleared. These are used for the interface preference you request.
FileToWeb cookie choices (ftw_cookie_preferences_v1 in local storage) record the preference version, time, and analytics choice. We ask again after six months, but a saved rejection continues to prevent default-on workspace replay until you change it or clear that stored choice. If preferences cannot be read, optional browser collection remains off.
Optional analytics
Google Analytics, when configured, measures page visits and selected product or checkout events using identifiers such as _ga and _ga_…. We configure a six-month cookie lifetime. PostHog, when configured, measures selected page and product events and records masked session replays using ph_… identifiers in cookies and local storage. Its cookies are configured for six months; local storage persists until cleared. Application replays mask inputs and page text and exclude embedded documents, media, console logs, and network request contents. Automatic capture of page interactions as separate analytics events remains disabled.
Masked PostHog replay and associated product events are on by default in signed-in workspaces, unless you reject optional analytics or enable a supported browser privacy signal. Google Analytics and marketing-page analytics remain off until you allow them. Accepting analytics does not grant advertising, advertising-user-data, or ad-personalization consent. Rejecting or withdrawing prevents future optional browser collection and clears accessible analytics identifiers; information already sent is subject to the applicable retention and rights-request rules.
Sentry receives necessary error diagnostics for reliability and security. Our configuration does not enable Sentry session replay. Stripe may use its own security and payment technologies when you open payment or billing features. Their storage varies by the payment flow and is explained in Stripe’s notices. These operational and payment purposes are separate from optional browser analytics.
Change your choices
Select Cookie settings in the footer of the FileToWeb website to allow or reject optional analytics, or review the individual purpose before saving. Necessary functionality remains enabled. You can change your choice at any time; rejecting optional analytics does not prevent signing up or using the Service. You can also clear cookies and site storage through your browser.
For information about personal data, service providers, server-side operational records, and rights requests, read our Privacy Policy. Contact support@filetoweb.com if a preference control is inaccessible or does not work as described.