Cookies Policy

BEAR uses a small number of cookies and similar browser storage technologies. Most exist to keep you signed in and remember your preferences. A few help us understand which features are used so we can improve them. We do not use advertising cookies and we do not sell your data.

A cookie is a small piece of data a website stores in your browser. Similar technologies include localStorage, sessionStorage, and browser cache entries. This policy covers all of them.

These are required for BEAR to work at all. Without them you cannot sign in or use the app.

• Authentication session. Supabase sets a signed session cookie so you stay logged in across pages and reloads. It is scoped to your browser and expires when your session does.
• Security. Cookies used to protect against cross-site request forgery and session hijacking.

BEAR stores small preferences locally in your browser so the app behaves the way you left it — for example, your theme choice and whether the sidebar is collapsed. These live in localStorage on your device and are not sent to our servers.

We use two analytics providers to understand which features are used and where the app breaks. Both are configured to respect your privacy — no advertising cookies, no cross-site tracking.

• PostHog.Product analytics — page views, feature usage, funnels. Used to see what actually helps traders and what doesn’t.
• Vercel Analytics. Aggregate traffic and performance data for the pages we serve.

A few pages load resources from other services we rely on. Each may set its own cookies under its own policy:

• Stripe — when you view or complete a payment, Stripe sets cookies to secure the checkout and detect fraud.

We do not use cookies for advertising, retargeting, or cross-site tracking, and we do not sell your data to anyone.

You can control cookies at any time using your browser:

• Delete existing cookies from BEAR in your browser’s privacy settings.
• Block cookies from BEAR entirely — the app will not be able to keep you signed in.
• Use your browser’s private / incognito mode, which discards cookies at the end of the session.

If you want us to delete the analytics and account data associated with your account, email us at withbear.app@gmail.com.

Browsers can send a “Do Not Track” signal. There is no industry standard for how sites should respond, so BEAR does not currently change its behavior based on that signal. The controls in section 6 give you direct control instead.

If we materially change this policy, we will update the “Last updated” date at the top and, where appropriate, notify you in the app.

Questions: withbear.app@gmail.com.