Cookie Policy

Last updated: Loading...

What Are Cookies?

Cookies are small text files that are placed on your computer or mobile device when you visit a website. They are widely used to make websites work more efficiently and to provide information to website owners.

This Cookie Policy explains how fav.ing uses cookies and similar technologies to recognize you when you visit our platform. It explains what these technologies are, why we use them, and your rights to control our use of them.

Why Do We Use Cookies?

We use cookies for several reasons:

  • To ensure our platform works properly and securely
  • To remember your preferences and settings
  • To understand how you use our platform
  • To improve your experience and our services
  • To provide personalized content and features
  • To analyze platform performance and usage

Who Sees the Consent Prompt

On the website, we ask for your permission before using analytics if you are in the European Economic Area, the United Kingdom or Switzerland. We work out where you are from your connection, using it only to decide whether to ask. If we can't tell, we ask. Until you accept, our analytics tools do not run and Google's tools are held in a "denied" state in which they don't set cookies. Outside those regions analytics are on unless you switch them off. You can change your choice at any time in Settings, and a Global Privacy Control signal always switches analytics and advertising signals off.

Types of Cookies We Use

Essential Cookies

These cookies are necessary for our platform to function and cannot be switched off.

  • Authentication cookies to keep you logged in
  • Security cookies to protect against fraud
  • Session cookies to maintain your session state
  • Preference cookies to remember your settings

Where your choice is kept. We set no cookies to apply it:

  • fav-ing-consent (local storage): your choices, so we don't ask again
  • fav-region (local storage, 24 hours): whether you appear to be in a region where we ask for permission

Analytics and Session Replay

With your permission (or, outside the regions above, unless you switch them off), on the website we use:

  • PostHog to count visits, see which features are used, and find errors and slow pages. It may set a cookie or local-storage value that identifies your browser. If you have an account it links this to your account number only, never your name, email or username.
  • PostHog session replay to see how people use the site (recordings of clicks, scrolls and page changes) so we can fix confusing screens. Recordings mask all text and everything you type, and are never made on your messages, your settings, or the sign-in, account-recovery, onboarding and profile-editing screens.
  • Google Tag Manager and Google Analytics 4 to measure visits and sign-ups on our website. They run in Google Consent Mode: until you consent they do not set cookies.

The app uses Google Firebase Analytics and PostHog for the same purposes, and does not record sessions.

Audience Measurement Identifier

If you browse fav.ing without an account, we store a single random identifier on your device so that we can count how many people viewed a list, rather than how many times a page loaded. It is created by your browser or app, never by a third party.

  • Name: faving.visitorId, stored in local storage (not a cookie, and never sent to another site)
  • What it is: a random value. It is not derived from your IP address, device, or browser fingerprint
  • What it is used for: counting unique views of a list, and nothing else
  • Who sees it: only fav.ing. It is never shared with, or sold to, anyone
  • Not linked to you: it is not connected to your account if you later sign in, and cannot identify you by name
  • How long: 13 months, after which it is replaced with a new random value
  • How to refuse: if your browser sends a Global Privacy Control or Do Not Track signal, we create no identifier at all and count nothing. Clearing your site data also resets it

Advertising Signals

We do not currently show advertising. We may later add advertising measurement tags through Google Tag Manager. If we do, outside the regions above they are on unless you switch them off, inside the regions above they stay off until you separately agree, and a Global Privacy Control signal or a "Do Not Sell or Share" choice always keeps them off.

Third-Party Cookies

We may use third-party services that place cookies on your device. These include:

Google (Tag Manager, Analytics, Firebase), PostHog, Vercel (hosting and aggregate performance measurement), Cloudflare (Turnstile bot check at sign-up and sign-in).

Cookie Lifespan

Session Cookies

These cookies are deleted when you close your browser and are used to maintain your session while browsing.

Audience Measurement Identifier

The faving.visitorId value expires 13 months after it is created and is then replaced with a new random value. The view counts recorded against it are deleted on the same schedule, so no anonymous browsing history is kept for longer than 13 months.

Persistent Cookies

These cookies remain on your device for a set period (typically 1-2 years) and help us recognize you when you return.

Your Cookie Choices

You have several options to control cookies:

Your Choice

If you were asked, your answer is saved on your device and, if you are signed in, on your account so it follows you to other devices. Change it any time on the web in Settings → Privacy Preferences (or Your Data Rights). Withdrawing stops PostHog and session replay straight away and tells Google to stop. Withdrawing does not affect what was collected before.

Manage Cookie Preferences

Browser Settings

You can set your browser to refuse cookies or alert you when cookies are being sent. However, some features of our platform may not function properly without cookies.

Global Privacy Control

If your browser or an extension sends a Global Privacy Control (GPC) or Do Not Track signal, fav.ing does not create the audience measurement identifier at all, and anonymous views from that browser are not counted. You do not need to tell us separately, and we do not store anything to remember the choice — the signal is read fresh on every visit.

If your browser sends a Global Privacy Control signal we also keep all analytics, session replay and advertising signals off, in every region, and do not show the consent prompt.

Opt-Out Tools

You can opt out of interest-based advertising by visiting industry opt-out pages or using browser extensions that block tracking.

Mobile Devices

In the app we use your device's local storage for your settings and sign-in, push notification tokens if you allow notifications, and the analytics tools above. We do not use device fingerprinting.

Mobile advertising identifiers. On iOS we ask your permission before tracking you across other companies' apps and websites (Apple's App Tracking Transparency prompt), and the iOS advertising identifier is only available to us if you allow it. On Android, the Google advertising ID may be available to Google's analytics tools; you can reset or delete it in your device settings.

You can control these through your device settings and app preferences.

Updates to This Policy

We may update this Cookie Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new policy on our platform.

Contact Us

If you have any questions about our use of cookies or this Cookie Policy, please contact us:

  • Privacy: privacy@fav.ing
  • Mailing address: Faving, Inc., 4564 Wolf Rd, Western Springs, IL 60558, USA

You can also visit our Privacy Policy for more information about how we handle your personal data.

    Analytics and cookies

    We'd like to measure how fav.ing is used so we can fix problems and improve it. Analytics stay off unless you accept, and you can change your mind any time in Settings. Cookie Policy