This page explains what cookies and similar storage technologies Mezcal Explorer uses, why, and how to control them. Policy version 1.
What we use
We distinguish between strictly necessary storage required to run the site, error monitoring that we operate under our legitimate interest, and optional analytics that we only load with your consent. Marketing pixels, advertising identifiers, and cross-site tracking are not used.
You can change your preferences at any time: . Withdrawal is as easy as granting consent.
A note on IP addresses: any HTTPS request reveals the connecting IP at the network layer to the receiving server. Where possible we have configured each processor to discard that IP after handling the request — see the inventory below for the exact handling per tracker.
Inventory
Tracker
Purpose
Basis
Retention
Sentry — Error monitoring
Detect, diagnose, and fix software faults that affect the explorer. No persistent cookies or local storage are written for this path.
Legitimate interest
90 days
PostHog — Product analytics
Measure how the explorer is used so we can improve product surfaces. Autocapture, automatic pageviews, and page leaves are disabled; only explicit product events are sent.
Consent
12 months
Sentry — Session replay
Record masked DOM events around errors and a sampled portion of sessions to help diagnose hard-to-reproduce issues. Text and inputs are masked; media is blocked.
Consent
30 days
Vercel Analytics
Forward a small set of allowlisted product events to Vercel for traffic and performance reporting. No persistent identifier is stored client-side.
Consent
Up to 12 months at the processor; visitor IPs are not retained
What each tracker observes
Sentry — Error monitoring
Legitimate interest
Detect, diagnose, and fix software faults that affect the explorer. No persistent cookies or local storage are written for this path.
Storage set
None on this device.
Data observed
Error type, message, and stack trace
Page URL at time of error
Browser and operating system identifiers
IP address visible at the network layer to the first-party telemetry tunnel and to Sentry; not attached to the stored event (sendDefaultPii: false)
Processor: Functional Software, Inc. (Sentry)
PostHog — Product analytics
Consent
Measure how the explorer is used so we can improve product surfaces. Autocapture, automatic pageviews, and page leaves are disabled; only explicit product events are sent.
cookie: __ph_opt_in_out (PostHog SDK; created when you opt out)
cookie: ph_<projectKey>_* (defensive cleanup target if persistence is misconfigured)
Data observed
Random anonymous distinct ID
Custom product events explicitly captured by the application
IP address visible at the network layer to the PostHog ingestion endpoint; not stored with the event (SDK ip:false)
User-agent and referrer headers from the request
Processor: PostHog, Inc.
Sentry — Session replay
Consent
Record masked DOM events around errors and a sampled portion of sessions to help diagnose hard-to-reproduce issues. Text and inputs are masked; media is blocked.
Storage set
sessionStorage: Sentry replay session state (only while active)
Data observed
Masked DOM mutations
Mouse movement and click coordinates
Scroll position and focus order
Page navigation events
Processor: Functional Software, Inc. (Sentry)
Vercel Analytics
Consent
Forward a small set of allowlisted product events to Vercel for traffic and performance reporting. No persistent identifier is stored client-side.
Storage set
None on this device.
Data observed
Allowlisted event names and properties
IP address visible at the network layer to the Vercel ingestion endpoint; per Vercel's privacy policy, visitor IPs are not retained
User-agent and referrer headers from the request
Processor: Vercel Inc.
Your choices
Analytics and session replay are off by default. You may opt in via the consent banner or the cookie-settings link.
Error monitoring runs under our legitimate interest in maintaining the service. You may object at any time using the cookie-settings link.
Strictly necessary storage cannot be disabled because it is required for authentication and security.
Re-prompts
We ask you to renew your decision every 180 days, and whenever this policy materially changes.