Cookie Policy

Effective July 13, 2026

🍪 TL;DR: Zero advertising cookies. By default we use only strictly-necessary cookies (security + login) plus anonymous, cookieless traffic counting (Cloudflare) — no personal data. Detailed product analytics & anonymous session replay (PostHog) start only if you click « Allow all », and your choice then applies across our whole site.

1. What are cookies?

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work, improve user experience, and provide information to site owners. Cookies can be « first-party » (set by us) or « third-party » (set by a service we use).

2. How Trag Studio uses cookies

We keep it minimal. Our website uses only strictly necessary cookies — those essential for the site to function and for basic security. For basic traffic counting we use Cloudflare Web Analytics — anonymous and cookieless (nothing stored on your device, no personal data), so it runs for everyone. For detailed product analytics and session replay we use PostHog (EU), which runs only with your explicit consent (« Allow all ») and then sets first-party cookies. We never use advertising cookies.

3. Cookies on trag.studio

CookieSourcePurposeDurationCategory
__cf_bm Cloudflare Bot detection — distinguishes human visitors from automated bots to protect the site from attacks 30 minutes Strictly necessary
cf_clearance Cloudflare Challenge clearance — stores proof that you passed a Cloudflare security challenge (no personal data) 30 minutes Strictly necessary
trag_session Trag Studio Authentication — keeps you logged into your account during your visit Session (deleted when you close your browser) Strictly necessary
trag_cookie Trag Studio Consent storage — remembers your cookie choice across the whole site (trag.studio + subdomains) so we ask only once 12 months Strictly necessary
ph_…_posthog PostHog (EU) Analytics & anonymous session replay — set only after you click « Allow all », shared across trag.studio & its subdomains to follow your visit. Typed text masked; IP discarded. Up to 12 months Consent-based (opt-in)

What we DON'T use

4. The desktop app (Trag Studio)

The Trag Studio desktop application does not use cookies, web views, or browser-based tracking of any kind. It stores your license key and preferences locally on your machine. No data is sent to us through normal app usage.

5. Third-party services

We use Cloudflare as our CDN and DNS provider. Cloudflare places the __cf_bm and cf_clearance cookies for security purposes. These are essential for protecting the site from DDoS attacks and malicious bots. Cloudflare's use of these cookies is governed by their privacy policy.

We use Cloudflare Web Analytics for basic, anonymous and cookieless traffic counting — it needs no consent. For detailed product analytics and anonymous session replay we use PostHog (hosted in the EU), which runs only if you click « Allow all ». It then sets first-party cookies to recognise your visit across our site (trag.studio, your account and the docs), with all typed text masked in replays and your IP discarded. PostHog's processing is governed by its privacy policy.

6. Managing your cookie preferences

You can control cookies in several ways:

7. Updates

We may update this Cookie Policy from time to time. The latest version is always at https://trag.studio/cookies. Anonymous, cookieless traffic counting (Cloudflare) runs by default; we ask for your consent before enabling PostHog analytics, session replay, or any non-essential cookie.

8. Contact

Questions about cookies? hello@trag.studio
HUGUES LLC — 1309 Coffeen Ave STE 1200, Sheridan, WY 82801, USA