Privacy & cookies
Cookie policy.
This page explains the cookies and similar technologies used by heyfolio.ai, why they are used, how long they last, and how to change your choice.
At a glance
Strictly necessary cookies and storage are always on. PostHog analytics stays off unless you accept it.
Last updated · 21 July 2026
Why this site uses cookies and storage
Folio uses cookies, local storage, session storage, scripts, and request signals to remember your choices, adapt the colour theme, protect the contact form, and—only when you accept analytics—understand how people use the site and improve the product.
How we categorise them
Essential technologies remember your analytics choice or protect a service you request, such as submitting the contact form. The consent record is needed to respect your choice. BotID is limited to proportionate security checks for the contact form you ask us to submit. Neither is used for analytics, and they cannot be switched off through the analytics control.
Appearance storage remembers the light, dark, or system theme you explicitly select so the site can provide the appearance you requested. It is not used for tracking. You can change or remove that preference at any time using the theme control in the footer or your browser settings.
Optional analytics is provided by PostHog and remains disabled until you select “Accept analytics”.
Which ones we use
Strictly necessary
folio_analytics_consentProvider · Folio
Remembers whether you accepted or rejected optional analytics and which version of the choice you saw.
Duration · 1 year
Vercel BotID
KP_*security cookies and challenge signalsProvider · Vercel
Uses proportionate browser and request signals only when protecting the contact form from automated abuse.
Duration · During the protected request or session
Appearance
broadsheet-theme:v1Provider · Folio
Applies the light, dark, or system appearance you explicitly select; it is not used for tracking.
Duration · Until cleared in your browser
Optional analytics
ph_*_posthogProvider · PostHog
Stores the anonymous identifier, session information, attribution, and analytics settings in a first-party cookie and local storage.
Duration · Up to 1 year
ph_*_window_id/ph_*_primary_window_existsProvider · PostHog
Keeps analytics activity associated with the correct browser tab and session.
Duration · Current browser tab or session
Consent control
__ph_opt_in_out_*Provider · PostHog
Records the SDK opt-in or opt-out state and prevents capture after withdrawal.
Duration · Up to 1 year
What optional analytics collects
PostHog can collect page views, navigation and call-to-action interactions, referring and campaign information, device and browser information, performance, errors, diagnostic console messages, heatmaps, and privacy-masked session replays. Contact-form values are not included in analytics events, and all form inputs are masked in session replay. Request bodies, response bodies, headers, and URL query strings are not recorded in replays.
Because Folio uses PostHog across its website and app, this visit may be connected with your Folio account after you sign in. Analytics data is sent to PostHog's EU Cloud service. You can read the PostHog privacy notice.
PostHog event and error data may be retained for up to seven years. Privacy-masked session recordings are retained for up to 30 days. We may delete information sooner when it is no longer needed.
How to change or withdraw your choice
Use the cookie status control in the footer on any page to accept or reject optional analytics. Rejecting analytics stops future capture, stops session recording, and removes optional PostHog browser persistence maintained by the SDK. The consent record remains so the site can remember your choice.
You can also clear your browser storage, which resets the choice and asks you again on your next visit. Questions or requests concerning previously collected data can be sent to hello@heyfolio.ai.
Where to find more information
Our privacy notice explains who is responsible for personal data, the lawful bases we rely on, who we share data with, and your rights.