What we store, and why.

Your current choice

You can change your mind at any time — nothing is locked in. Opening the panel below shows exactly what is on right now.

Change cookie settings

Essential — always on

• Sign-in and session. Set by our authentication provider so you stay logged in and your workspace stays yours. Typically lasts up to 30 days.
• Security. Protects sign-in forms and API calls from abuse.
• Payments. Stripe sets cookies during checkout and card entry for fraud prevention. See Stripe's own cookie notice.
• Local preferences. Your entered website, your saved plan token, your email for a faster sign-in and this cookie choice itself are kept in your browser's local storage, not sent to anyone.

These are strictly necessary to deliver a service you asked for, so they do not require consent and cannot be switched off while you use the site.

Product analytics — off until you allow it

We use PostHog (EU hosting) to count page views, clicks and funnel steps so we can see where the product confuses people. PostHog sets identifier cookies and local storage entries (ph_*) that last up to 12 months. No analytics request is made before you accept, and no data is sold or used for cross-site advertising profiles.

Session replay — a separate choice

Also PostHog. When you allow it, your visit to gtm.help is recorded as a replay of the screen so we can watch a broken flow back. All typed input is masked, so passwords, card fields and free-text notes are never captured. Replays are retained for up to 30 days. This is switched off unless you turn it on, and turning analytics off turns it off too.

Advertising measurement — off until you allow it

The X (Twitter) conversion pixel tells X that a visit arriving from one of our ads became a signup, so we know which ads are worth running. It sets X's own cookies. If you reject it, the pixel script is never loaded.

How to change or withdraw consent

Use the "Change cookie settings" button above, or the "Cookie settings" link in the footer of every page. Withdrawing consent stops future collection immediately; it does not delete data already collected — email team@gtm.help to request deletion. You can also block or clear cookies in your browser settings, and most browsers offer a do-not-track or global privacy control signal.

More detail

What we do with the data, how long we keep it and your rights are set out in our Privacy Policy. The rules for using the product are in our Terms of Service. Questions: team@gtm.help.