Cookie and browser storage notice
RateMyDOT does not use advertising cookies, tracking pixels, cross-site identifiers, or social-media embeds. It uses one anonymous product-analytics store, described below, and the rest of the storage described below exists only to provide requested site functions.
Strictly necessary preview cookie
Before public launch, entering the shared preview password sets rmd_gate. It is HTTP-only, Secure, SameSite=Lax, available only on this site, and expires after 30 days. It contains a cryptographic proof, not the password. When the preview gate is removed, the site stops setting or reading this cookie; an existing copy expires on its original schedule.
Account session storage
Supabase Auth keeps the signed-in session in this browser’s local storage. RateMyDOT does not put the session in a shared cross-site cookie. Signing out removes the active local session; clearing site data removes it from the browser.
Review capability storage
After a report is submitted, the browser stores the one-time capability token under a key beginning rmd_review_token_. This is the only recovery copy RateMyDOT can make for that browser. Clearing it without saving the token elsewhere permanently removes that route back to the report.
Product analytics storage
PostHog analytics stores an anonymous identifier in this browser’s local storage under keys beginning ph_. It is random, not derived from your account, and never connected to your email, your account, a report, or a letter. It exists so we can count visits and completed actions without knowing who you are. If your browser sends the Global Privacy Control or Do Not Track signal, the analytics script does not load and this storage is never created. Clearing site data removes it.
Why there is no consent banner
The only non-essential storage here is the anonymous analytics identifier above, and your browser’s Global Privacy Control or Do Not Track setting turns it off completely. We treat that signal as your recorded choice, honored nationally, instead of interrupting every visit with a banner.
See the full Privacy Policy.