Cookies and browser storage

A cookie is a small piece of data stored by the browser. Puhtaat also uses localStorage. Necessary storage supports the service, authentication, security or a choice you make. Optional analytics storage is used only with your consent.

• puhtaat_locale

  Remembers your selected language.

  Browser retention: 1 year

• puhtaat_analytics_consent

  Remembers whether you allow optional analytics. Analytics does not start without permission.

  Browser retention: 180 days

• puhtaat_customer_session_[request identifier]

  Keeps the personal quote view open after email-link verification. The cookie is protected with HttpOnly.

  Browser retention: 7 days

• Clerk session cookies

  Provide company authentication and security. Exact names and duration depend on the session.

  Browser retention: for the session or according to Clerk account settings

• Cloudflare Access session cookies

  Provide administration authentication and security.

  Browser retention: for the session or according to Cloudflare Access settings

• Cloudflare Turnstile and security cookies

  Protect public forms against automated abuse. Cloudflare may set cf_clearance when required.

  Browser retention: for the check and Cloudflare security settings

• puhtaat:competition-draft (localStorage)

  Stores non-sensitive quote-form choices on the device so the form can be continued. Names, contact details, free text and access instructions are not stored.

  Browser retention: up to 7 days

With consent, PostHog EU processes page views, interface events, browser technical data and a pseudonymous identifier. Limited session replay may start only after a quote-request, company-application or quote form is started, or a result/error view is opened from an email link. Form values and sensitive text are masked; console logs, request bodies or headers and canvas content are not recorded; token-bearing /open/ routes are excluded.

• puhtaat_posthog_distinct_id

  Links consented usage events to the same pseudonymous browser.

  Browser retention: 180 days

• PostHog ph_ storage

  Maintains the analytics session and consented pseudonymous state.

  Browser retention: according to PostHog settings, up to 365 days

Google Tag Manager loads only after consent. It manages tags and does not currently load advertising tracking or set a fixed Puhtaat cookie itself.

You can change your choice at any time using Cookie settings in the footer. Disabling analytics stops new analytics events and active session replay and removes Puhtaat’s PostHog identifier. Other stored data can be removed in browser settings, which may sign you out or clear a form. Withdrawing consent does not affect the lawfulness of earlier processing.

For questions about cookies or personal-data processing, contact tuki@puhtaat.fi.