Cookie Policy
The cookies, in plain English.
Last updated: May 11, 2026
A cookie is a small file a website saves on your device so it can remember things between visits. Gwaky uses cookies (and a couple of similar technologies like localStorage) for sign-in, preferences, and analytics. This page lists each category, what it does, and how you can turn it off.
The choices you make get recorded in your ConsentLog, so we can prove which categories you agreed to and when. You can change any non-essential category at any time from your profile settings.
1. The categories
Essential
Always onRequired for the site to work. These cookies keep you signed in, protect your account from CSRF attacks, store basic security flags, and remember the consent choices you make on this page. You cannot opt out — without these we can’t run the service.
Examples: Auth.js session cookies, CSRF tokens, your ConsentLog snapshot.
Functional
OptionalRemember your preferences and improve the experience. Things like which markets and neighborhoods you follow, theme choice, and dismissed banners. Turning these off means the site forgets your preferences between sessions.
Examples: Theme, dismissed onboarding tips, last-visited neighborhood.
Analytics
OptionalHelp us understand how people use Gwaky so we can fix what’s broken and build what matters. Events are pseudonymous (tied to a generated ID, not your email).
Examples: PostHog — our analytics provider — sets a distinct-ID cookie and tracks page views, feature usage, and performance.
Marketing & Personalization
OptionalPower product email you opted into (new takes on listings you follow, weekly digests) and lightly personalize what we surface in-product based on your follows and reactions. Turning this off stops the personalization layer and unsubscribes you from marketing email.
Examples: Email-engagement pixels, personalization preference flags.
2. How to control them
- In Gwaky. Go to your profile settings to toggle Marketing, Personalization, Push, and Data Processing consent. Changes are written to your ConsentLog and take effect on the next page load.
- In your browser. Every major browser lets you block or clear cookies for a site. Blocking essential cookies will break sign-in.
- Global signals. We honor Global Privacy Control (GPC) where supported. If your browser is sending GPC, we treat that as a request to opt out of non-essential analytics and personalization.
3. Other technologies we use
- localStorage / sessionStorage. Used for short-lived UI state (open threads, draft comments) that’d be annoying to lose on a page refresh.
- Server-Sent Events (SSE). Real-time notifications use an open connection rather than a cookie, but the connection itself is authenticated using your session.
- Vercel infrastructure. Our host, Vercel, may set short-lived cookies for routing, edge cache, and DDoS protection. These are treated as essential.
4. Third parties
We use the smallest possible set of third-party providers. Today that’s:
- PostHog — analytics (Analytics category).
- Vercel — hosting, CDN, and Blob storage (Essential category).
- Google, Apple, GitHub — only when you choose to sign in with them. Those providers may set their own cookies on their domains.
We do not run advertising trackers, retargeting pixels, or any third-party social plugins on Gwaky.
5. Changes to this policy
When we add a new category or vendor, we’ll update the “Last updated” date and, when required, ask you to re-confirm your consent before continuing to use Gwaky.
6. Contact
Questions, or want a record of your consent history? privacy@gwaky.com.