Cookie Policy
Last updated: October 2026
What they are and how we apply them
Cookies and similar technologies (such as your browser's local storage) store or read information on your device. This policy only lists what MecánicOS actually loads. The first time you visit, we ask you to choose between Accept and Reject, with equal ease; until you accept, no analytics, advertising or chat tool is loaded.
Strictly necessary (no consent required)
- Session: Firebase Authentication (Google) keeps you signed in using your browser's local storage.
- Language: a language preference cookie (NEXT_LOCALE) remembers the language you choose.
- Your cookie choice: stored in the browser's local storage (key cookie-consent) so we do not ask again.
- Anti-bot security: Cloudflare Turnstile is loaded only when you use a form that needs it (sign-up, access request, accepting an invitation) or when you display the provider's legal details. It tells people apart from automated programs; we do not use it for advertising. See Cloudflare's policy for how it works technically.
We also use, without tracking cookies, error monitoring (Sentry) and Vercel's aggregated performance and visit metrics (Web Analytics and Speed Insights), which are necessary to keep the service running.
Only with your consent
- PostHog (usage analytics): measures pages visited and features used to improve the service. EU server, no session recording. If you are signed in, it is linked to an internal user and workshop identifier, not to your name or email. posthog.com/privacy
- Google Ads (conversion measurement): measures whether a sign-up came from an ad. We do not use remarketing or ad personalisation. policies.google.com/technologies/ads
- Crisp (support chat): only inside the application, after signing in. If you accept, it shares your name and email with the chat so we can help you. crisp.chat/en/privacy
Changing your choice
You can change or withdraw your consent at any time with “Cookie preferences” in the footer: the notice is shown again. Withdrawing stops analytics (PostHog) capture, and Google Ads immediately receives the consent-denied signal and we send no further events, without reloading; the Google tag already loaded stays inactive on the page until you accept again. If the support chat had already loaded in that tab, the page reloads to unload it. Cookies already stored stay in your browser until they expire or you delete them; you can also clear site data from your browser.
Subscription payments are made on Stripe pages, which apply their own policy.