Cookie policy

Cookies are small text files that a website stores on your device. They are used to remember information between page visits. Similar techniques, such as your browser's localStorage, fall under the same rules, so we describe those here as well.

Innerscape uses storage that is necessary for the app to work, optional cookies for analytics and error tracking, and a few measurements that work without cookies.

Innerscape distinguishes two categories:

• 1.
  Necessary— always on

  Your browser's localStorage for your login session, your session data and your cookie preferences. Without these you cannot use the app.

• 2.
  Analytics & error tracking— optional

  Google Analytics 4 and Sentry. Google Analytics shows us how visitors find and use the site. Sentry tracks down technical errors and, on a share of visits, measures how fast pages load. With Session Replay, Sentry records the whole visit for 1 in 10 visits, and for every visit in which an error occurs the moments leading up to it, so we can reproduce the problem. In those recordings all text and all input fields are masked and images and media are blocked; they do show where you click and how you scroll. Sentry keeps error data for up to 90 days. You can switch this category on or off in the cookie banner.

Innerscape uses Supabase for authentication. Supabase keeps your login session in your browser's localStorage, not in a cookie. Without that data you cannot stay logged in. It is used only to keep you logged in and is not shared with third parties.

Besides cookies, Innerscape uses your browser's localStorage to store your session data locally. This includes:

• →Your progress through the questionnaires
• →Your answers to the questions
• →Generated reports
• →Your cookie preferences (innerscape_consent)
• →Which site or campaign first brought you here (innerscape_first_touch, see Analytics)

This data does not leave your browser unless you are logged in — then it is also stored in your account so you can continue on another device.

We measure how the site is used in two ways: with measurements that are always on and set no cookies, and with Google Analytics, which sets cookies only after you consent.

Always on

• →Vercel Web Analytics counts page visits with the page, the referring site, your country, device type and browser. Vercel recognises a visitor only through a code (hash) calculated from the request, which expires after 24 hours. No cookies are set.
• →Vercel Speed Insights measures how fast pages load and respond, with the page, your country, device type, browser and network speed. These measurements are not linked to a visitor and no cookies are set.
• →Our own visitor counter receives, for every page you open, the path, the referring site and any campaign codes (utm). We do not store your IP address or browser details. To count visitors per day and recognise bot traffic, we derive a one-way code (hash) from them using a secret key and the date. That code changes every day, so visits on different days cannot be linked. No cookies are set.
• →Your first visit: we keep in your browser's localStorage which site or campaign first brought you here. If you create an account, we send that to our server once and store it with your account, so we know which channels lead to sign-ups.

The cookie banner does not switch these measurements off.

After you consent

Google Analytics 4 shows us how visitors find and use the site. Only when you accept analytics cookies does GA4 set the cookies _ga and _ga_3F5DR20P4G, which stay valid for up to two years. Without consent the Google tag still loads, but it sets no cookies and sends Google only a cookieless signal per page: that the page was visited, your consent choice, the time, your browser and the referring page. Google uses those signals for basic measurement and statistical modelling. According to Google, Google Analytics 4 does not store IP addresses.

Sentry also starts only after you consent; what Sentry records is described under the cookie categories above. We use no advertising cookies and share no data with advertisers or data brokers.

You can delete cookies at any time in your browser settings.

You can clear localStorage by deleting Innerscape's site data in your browser settings, or through your browser's developer tools. This removes your locally stored session data, and you will have to log in again.

You can change your cookie preferences at any time by clicking the button below. The cookie banner will reappear so you can review your choice.