Cookie Policy
Last updated 18 July 2026
This page explains the cookies and similar technologies (like localStorage) that PitchGo uses. It is written to comply with the UK Privacy and Electronic Communications Regulations (PECR) and UK GDPR.
Why there's no cookie pop-up
PitchGo only uses cookies and local storage that are strictly necessary for the service to work — for example, to keep you signed in and to protect your account. Under PECR, strictly necessary cookies do not require a consent banner. We do not run advertising cookies, analytics that identify you, or cross-site tracking, so there is nothing to opt in or out of on our site.
What we set on pitchgo.app
- Supabase authentication token (local storage, key starting
sb-…-auth-token) — keeps you signed in. Removed when you sign out or clear browser storage. Strictly necessary. - Session and CSRF tokens — short-lived tokens used to protect form submissions and API calls from cross-site request forgery. Strictly necessary.
- Remembered email (local storage) — pre-fills the email field on the sign-in screen if you've signed in before. You can clear it by clearing your browser storage. Strictly necessary / functional.
- Cookie policy acknowledgement (local storage flag, if used) — remembers you've seen this page so we don't show information notices repeatedly. Strictly necessary / functional.
Third-party cookies you may encounter
A few third-party services are loaded on specific pages. Where they set cookies, they act as independent controllers for those cookies and their own policies apply.
- Stripe — when you go through Checkout to start a Pro subscription, Stripe redirects you to checkout.stripe.com and sets its own cookies there for fraud prevention and session handling. See stripe.com/cookie-settings.
- Mapbox — used to display the map on market pages. Mapbox tiles are requested over the Mapbox API using an access token; Mapbox does not set persistent tracking cookies on pitchgo.app. Their privacy notice is at mapbox.com/legal/privacy.
- hCaptcha — shown on the sign-up / sign-in screen to block bots. hCaptcha sets its own short-lived cookies as required for the challenge to work; see hcaptcha.com/privacy. It is classed as strictly necessary because it protects the sign-in form from abuse.
What we don't use
- No third-party advertising or retargeting cookies.
- No cross-site tracking or "fingerprinting".
- No Google Analytics, Meta Pixel, TikTok Pixel or similar trackers.
- No sale of your data to advertisers or data brokers.
Managing cookies in your browser
You can clear cookies and local storage at any time in your browser's settings. Doing so will sign you out and clear remembered preferences. You can also block cookies for our site — but because the ones we use are strictly necessary, parts of PitchGo will stop working (you won't stay signed in).
Changes to this policy
If we ever add non-essential cookies (for example, product analytics), we will update this page and show a consent banner asking for your permission first — you will always have the choice to refuse them.
More on data
For the wider picture of what personal data we hold and your rights, see our Privacy Policy and Your data page.
Contact
Questions? Email support@pitchgo.app.