Legal
Cookie Policy
Effective: 17 July 2026
PostMTA uses cookies and similar tracking technologies to operate our website and services. This policy explains what they are, why we use them, and the choices you have.
1. What Are Cookies?
Cookies are small text files stored in your browser when you visit a website. They help sites remember your preferences, keep you logged in, and understand how you use the site. We also use related technologies: Local Storage (for theme preference), Session Storage (temporary data during a browser session), and pixels (described in the relevant sections below).
2. Our Three Categories
2.1 Essential Cookies
These are required for the website and service to function. They cannot be disabled without making the site unusable (you will be unable to log in, set preferences, or navigate properly).
| Name | Provider | Purpose | Duration |
|---|---|---|---|
pmh_session | postmta.com | Maintains your authenticated session across page requests | Session |
csrf_token | postmta.com | Cross-Site Request Forgery protection — validates that requests originate from our servers | Session |
pmh_preferences | postmta.com | Stores theme (light/dark), language, and timezone preferences | 1 year |
pmh_consent | postmta.com | Records your cookie consent choices (GDPR requirement) | 1 year |
2.2 Analytics Cookies
These help us understand how visitors use our website so we can improve it. Data is aggregated and anonymised — we cannot identify individual users from analytics data. You can opt out of analytics cookies without affecting your ability to use the site.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_pk_* | Plausible Analytics privacy-first, no cookies by default, GDPR/CCPA compliant | Page visits, scroll depth, referrer, device type — aggregate only | 13 months |
We do not use Google Analytics, Mixpanel, Amplitude, or similar platforms that profile users or share data with ad networks.
2.3 Marketing Cookies
We do NOT use marketing cookies from third-party advertising platforms (Google Ads, Facebook Pixel, LinkedIn Insight, etc.). We do not run behavioural advertising on our website. The only "marketing" use of tracking on our site is:
- Email open/click tracking within transactional and marketing emails we send you directly — you can unsubscribe at any time
3. Third-Party Cookies
Some cookies are set by services we use to operate the business:
| Service | Provider | Type | Purpose |
|---|---|---|---|
| Stripe | stripe.com | Essential (payments) | Secure payment session token — required to process card payments |
| Google Fonts | google.com / gstatic.com | Essential (UX) | Font delivery optimisation via CDN preconnect — does not track users |
| Supabase Auth | supabase.com | Essential (auth) | Handles OAuth session tokens for SSO — not used for marketing |
These third-party services operate under their own privacy policies. You can block them by adjusting your browser settings, though this may break related functionality (e.g., payments).
4. Managing Your Preferences
You have several ways to control cookies:
- Browser settings: Most browsers let you block or delete cookies via Settings → Privacy and Security. Blocking essential cookies will break authentication and preferences.
- Our cookie consent banner: Shown on first visit; allows you to Accept All, Reject Non-Essential, or Customise. Your choice is stored in the
pmh_consentcookie for 1 year. - Email unsubscribe links: Every marketing email we send includes a one-click unsubscribe link
- Preference centre: Use the form at the bottom of this page to update your choices at any time
5. Consent & Withdrawal
Under GDPR and ePrivacy, we require your consent before placing non-essential cookies on your device. Your consent is:
- Freely given: No dark patterns, pre-ticked boxes, or bundled consent
- Specific: You can accept analytics without accepting marketing cookies
- Informed: This policy and the consent banner explain each category clearly
- Reversible: You can withdraw consent at any time via the preference centre below or by emailing privacy@netwit.ca
Withdrawing consent does not affect the lawfulness of processing before you withdrew it.
Cookie Preference Centre
Manage your cookie preferences for postmta.com. Essential cookies cannot be disabled as they are required for the site to function.
Essential Cookies
Required for authentication, security, and basic site functionality. Cannot be disabled.
Analytics Cookies
Help us understand site usage via Plausible Analytics — aggregate, privacy-first, no personal data.
Questions? Email privacy@netwit.ca