Pathly Legal / Everyone
Cookie Notice
What we set, why, and how to turn it off. Two different places are covered here: the public website at pathly.com, and the Pathly app at app.pathly.com. They behave differently, so we describe them separately.
- Version
- 1.0
- Effective
- July 30, 2026
- Applies to
- pathly.com and app.pathly.com
- Part of
- Privacy Policy
The short version
- The app sets what it needs to keep you signed in, plus anonymized analytics. No advertising cookies, ever.
- The website sets marketing and analytics cookies so we can measure campaigns aimed at counselors, educators, and parents.
- Student data from a Pathly account is never used for marketing or advertising, anywhere.
- You can change or withdraw consent at any time from the cookie settings link in our website footer.
01 What a cookie is
A cookie is a small file a website stores in your browser. It lets a site remember something between page loads, like the fact that you are signed in. This notice also covers similar technologies such as local storage, pixels, and tracking scripts, which do comparable things by different means.
Cookies set by pathly.com are first-party. Cookies set by another company's script running on our pages are third-party. Both are listed below.
02 Categories we use
| Category | What it does | Consent |
|---|---|---|
| Strictly necessary | Signing you in, keeping your session, security, load balancing, remembering your cookie choices | Not required. The service does not work without these. |
| Functional | Remembering preferences such as display settings | Required where the law requires it |
| Analytics | Understanding which pages and features get used, in anonymized form | Required |
| Marketing | Measuring campaigns that market Pathly to counselors, educators, and parents | Required |
Strictly necessary cookies are set regardless of your choices. Everything else waits for consent through our banner.
03 On the website at pathly.com
Our public marketing site runs HubSpot for visitor analytics and campaign measurement, and Google Tag Manager to load and manage those scripts.
| Set by | Purpose | Category | More |
|---|---|---|---|
| Pathly | Session integrity, security, and storing your cookie preferences | Strictly necessary | First party |
| HubSpot | Recognizing returning visitors, measuring which pages and campaigns bring counselors and educators to us, and attributing form submissions | Marketing and analytics | HubSpot privacy |
| Google Tag Manager | Loading and managing the scripts above according to your consent choices | Varies by the tag it loads | Google privacy |
HubSpot's tracking cookies are typically named hubspotutk, __hstc, __hssc, and __hssrc, with lifetimes ranging from the browser session up to six months. The live inventory, with exact names and durations, is available in the cookie settings panel in our website footer, which scans the site and stays current as scripts change.
Who this is aimed at
This category measures our own advertising and how people find Pathly. It is about bringing people to Pathly. No data from a student's Pathly account is used to target it, and Pathly shows no third-party advertising to students inside the product.
04 In the app at app.pathly.com
The app is a different environment with a different rule. HubSpot does not run in the app. There are no marketing or advertising cookies in the app at all.
| Set by | Purpose | Category |
|---|---|---|
| Pathly and Supabase | Authentication tokens and session management, so you stay signed in | Strictly necessary |
| Pathly | Security, rate limiting, and abuse prevention | Strictly necessary |
| PostHog | Anonymized product analytics. Person profiles off, session recording off, autocapture off, IP anonymization on, personal information filtered. | Analytics |
The subprocessor list describes exactly how PostHog is configured and what is excluded from it.
05 Students and cookies
Never, for any student
- Advertising or retargeting cookies inside the app
- Selling or sharing student information with advertising networks
- Using anything from a student's Pathly account to target marketing at them, their classmates, or their family
- Session recording or screen capture
- Interest-based advertising directed at anyone under 13
06 Your choices
6.1 Our banner
The first time you visit pathly.com you will see a cookie banner. Nothing in the analytics or marketing categories loads until you make a choice. Declining is as easy as accepting, and you can change your mind whenever you like.
6.2 Changing your mind
Use the cookie settings link in the website footer to see your current choices and change them. Withdrawing consent stops future collection. It does not undo what was already collected, so if you want that deleted, write to privacy@pathly.com.
6.3 Your browser
Every major browser lets you block or delete cookies in its settings. Blocking strictly necessary cookies will sign you out of Pathly and break parts of the app.
6.4 Opting out of analytics providers directly
You can also opt out at the provider level through the privacy links in Section 3.
07 Do Not Track and Global Privacy Control
Browsers send these signals inconsistently and there is no single agreed standard for responding to Do Not Track, so we do not claim to honor it. We do respond to Global Privacy Control signals where we receive them, by treating the signal as a decline for the analytics and marketing categories.
08 Changes and contact
We will update this notice when the scripts we run change. Material changes are announced on this page and in the changelog at least 30 days before they take effect. The live cookie inventory in the settings panel updates continuously and is the most current record.
Questions: privacy@pathly.com.
