Cookies & subprocessors

Last updated August 22, 2026

We keep tracking to a minimum. Essential cookies keep you logged in; anything used for analytics or advertising stays off until you opt in. You can change your mind any time — .

Always on (essential)

Session & login	Keeps you signed in. Set by our database provider.
Preferences	Remembers your theme, text size, and cookie choices. Stored on your device.

Optional (your choice)

Vercel Web Analytics	Aggregate page metrics. Cookieless — no personal data, on by default.
Opinly	Campaign attribution — which ad or link brought you here. Cookieless (a random ID in your browser’s local storage); an email you submit is stored only as a hash. On by default.
Google Analytics	Site usage analytics. Loads only if you allow "Analytics".
Meta Pixel	Ad measurement. Loads only if you allow "Marketing".

Google Analytics and the Meta Pixel do not load until you allow them. We use Google Consent Mode, which defaults every non-essential signal to denied.

Service providers (subprocessors)

These providers process data to run Heard:

Supabase	Database, login, storage, realtime
Vercel	Hosting + cookieless analytics
OpenAI	Roux AI — answers from your kitchen’s data (not used to train models)
Stripe	Subscription billing. Card details are entered on Stripe’s own checkout — we never see or store them.
Resend	Account email — sign-up confirmations, password resets, invites
PostHog	Roux answer-quality monitoring. Receives the question asked and Roux’s answer, tied to an account id rather than your name.
Sentry	Error monitoring. Configured without IP addresses, cookies, or request bodies, and email addresses are scrubbed.
Twilio	SMS notifications. Your kitchen supplies its own Twilio account — we hold none.
Slack	86 alerts, shift notes, and nightly reviews posted to your workspace. Your kitchen supplies its own webhook.
Apple / Google / Mozilla	Web push delivery. The payload is encrypted end to end, so they relay text they cannot read.
Google Firebase	Push delivery to the iOS and Android apps. Unlike web push, the notification title and body are readable by Google.
Checkly	Uptime checks against public pages. No personal data.
Sanity	Food Bible and announcement content. Editorial only — no personal data, fetched server-side.