Last updated: 7 May 2026 Effective date: 7 May 2026
This page is the public Cookie Policy for journail.app. It explains the cookies and similar technologies we set, why we set them, and how you can change your preferences.
The approach is explicit opt-in for all non-essential cookies, in line with the GDPR (Regulation (EU) 2016/679), the ePrivacy Directive (2002/58/EC) as transposed into Slovenian law, and guidance from the Slovenian Information Commissioner.
1. What cookies are
Cookies are small text files placed on your device by your browser when you visit a website. They are widely used to make websites work, to remember your preferences, and to understand how the site is used. Some technologies — local storage, session storage, pixels, fingerprinting — work differently from cookies but serve similar purposes; in this policy we use "cookies" as a shorthand for all of them.
2. Our principles
- You are in control. Nothing other than what is strictly necessary is set without your active opt-in.
- No marketing trackers. journail.app contains no advertising and embeds no third-party advertising or social-media tracking pixels.
- No dark patterns. "Reject all" is as easy as "Accept all" and visually equivalent. We do not use pre-ticked boxes, hidden controls, or guilt-trip wording.
- Granular control. You can accept some categories and decline others.
- Easy revocation. You can change your choices at any time via the "Cookie settings" link in the footer.
3. The cookies we set
3.1 Strictly necessary (always on; no consent required)
These are essential for the Service to function. Without them, you cannot log in, your session cannot be secured, and your language preference cannot be remembered.
| Name | Purpose | Storage | Duration |
|---|---|---|---|
next-auth.session-token / authjs.session-token | Authenticated session token | HTTP-only cookie | Session, max 30 days |
authjs.csrf-token | Cross-site request forgery protection | HTTP-only cookie | Session |
journail_lang | Stores your language choice (English / Slovenian) | Cookie | 1 year |
journail_theme (next-themes) | Remembers light/dark mode preference | Local storage | Until cleared |
journail_region | Region detected from IP for GDPR/CCPA compliance routing | Cookie | 7 days |
journail_consent_subject | Anonymous identifier for the consent audit log | Cookie | 1 year |
journail_cc | Remembers your cookie preferences so we don't ask again on every visit | Cookie | 6 months |
Lawful basis: Article 6(1)(b) GDPR (contract) and Article 6(1)(f) GDPR (legitimate interest in security and proof of consent).
3.2 Functional (consent required)
These remember non-essential preferences that improve your experience.
| Name | Purpose | Storage | Duration |
|---|---|---|---|
journail_dashboard_layout | Remembers your dashboard view preferences | Local storage | Until cleared |
Lawful basis: Article 6(1)(a) GDPR (consent).
3.3 Analytics (consent required)
We use PostHog to understand how the Service is used so we can improve it. PostHog is configured in privacy-preserving mode:
- IP addresses are anonymised before storage.
- Third-party cookies are disabled.
- Session recording is disabled on pages that contain journal entries, goals, or the AI conversation.
- Data is hosted in the EU region (Frankfurt).
| Name | Purpose | Provider | Duration |
|---|---|---|---|
ph_* | Anonymous product usage analytics | PostHog | 1 year |
Lawful basis: Article 6(1)(a) GDPR (consent).
3.4 Marketing
We do not use marketing cookies. journail.app does not run advertising and does not embed third-party advertising or social-media tracking pixels. We currently have no plans to introduce them. If this ever changes, we will update this policy and ask for your explicit consent before any such cookie is set.
4. How to manage cookies
You can manage your preferences in two ways:
- Via journail.app — click the "Cookie settings" link in the footer of any page. This opens the same control panel you saw on first visit.
- Via your browser — every modern browser lets you block or delete cookies. Note that blocking strictly necessary cookies will prevent you from logging in.
Useful links:
- Chrome: https://support.google.com/chrome/answer/95647
- Firefox: https://support.mozilla.org/kb/cookies-information-websites-store-on-your-computer
- Safari: https://support.apple.com/guide/safari/manage-cookies-sfri11471
- Edge: https://support.microsoft.com/microsoft-edge/cookies
We also honor the Global Privacy Control (Sec-GPC: 1) browser signal — if your browser sends it, we treat it as a "reject all" for analytics and marketing categories.
5. Re-prompt rules
Even after you choose, we may show the banner again in the following cases:
- After 6 months — your consent record expires and we ask again.
- After a material policy change — if we add a new analytics provider or change how cookies are used, we re-prompt with a clear "what changed" notice.
- After a new category is introduced — you decide before any new technology is loaded.
6. Changes
We will update this policy when our cookie practices change. The "Last updated" date reflects the latest revision.
7. Contact
For questions about cookies, write to info@journail.app.
Tomaž Pernovšek s.p. Dolinškova ulica 10a, 1000 Ljubljana, Slovenia