Cookies and browser storage

A cookie is a small piece of data stored by the browser. Puhtaat also uses localStorage. Necessary storage supports the service, authentication, security or a choice you make. Optional analytics and advertising measurement storage is used only with your consent to each purpose.

• puhtaat_locale

  Remembers your selected language.

  Browser retention: 1 year

• puhtaat_analytics_consent

  Remembers whether you allow optional analytics. Analytics does not start without permission.

  Browser retention: 180 days

• puhtaat_ads_consent

  Remembers whether you allow Google Ads measurement independently of analytics.

  Browser retention: 180 days

• puhtaat_customer_session_[request identifier]

  Keeps the personal quote view open after email-link verification. The cookie is protected with HttpOnly.

  Browser retention: 7 days

• Clerk session cookies

  Provide company authentication and security. Exact names and duration depend on the session.

  Browser retention: for the session or according to Clerk account settings

• Cloudflare Access session cookies

  Provide administration authentication and security.

  Browser retention: for the session or according to Cloudflare Access settings

• Cloudflare Turnstile and security cookies

  Protect public forms against automated abuse. Cloudflare may set cf_clearance when required.

  Browser retention: for the check and Cloudflare security settings

• puhtaat:competition-draft (localStorage)

  Stores non-sensitive quote-form choices on the device so the form can be continued. Names, contact details, free text and access instructions are not stored.

  Browser retention: up to 7 days

With consent, PostHog EU processes page views, interface events, browser technical data and a pseudonymous identifier. Limited session replay may start only after a quote-request, company-application or quote form is started, or a result/error view is opened from an email link. Form values and sensitive text are masked; console logs, request bodies or headers and canvas content are not recorded; token-bearing /open/ routes are excluded.

• puhtaat_posthog_distinct_id

  Links consented usage events to the same pseudonymous browser.

  Browser retention: 180 days

• PostHog ph_ storage

  Maintains the analytics session and consented pseudonymous state.

  Browser retention: according to PostHog settings, up to 365 days

With your separate permission, Google Tag Manager loads the Google Ads tag to measure which ads lead to saved quote requests and completed company registrations. Google processes page URLs, ad-click and cookie identifiers, IP address, browser data and conversion events. We send a pseudonymous event identifier to prevent duplicate counting; our conversion events do not contain form contents or contact details. Advertising personalization remains disabled.

• Google Ads _gcl_* cookies

  Connect ad clicks to conversions and measure advertising performance.

  Browser retention: typically 90 days

Other Google cookies may be used according to your Google settings. See Google’s advertising cookie information for names, purposes and retention.

You can change your choice at any time using Cookie settings in the footer. Disabling analytics stops new analytics events and active session replay and removes Puhtaat’s PostHog identifier. Disabling advertising measurement stops our conversion events and updates Google’s consent signals to denied. Other stored data can be removed in browser settings, which may sign you out or clear a form. Withdrawing consent does not affect the lawfulness of earlier processing.

For questions about cookies or personal-data processing, contact tuki@puhtaat.fi.