Cookie Policy
Last updated October 5, 2026
This Cookie Policy explains what cookies and similar technologies (like local storage) Shabtay Properties LLC (“Puffly,” “we,” “us”) uses on the Puffly website and application (the “Service”), why we use them, and how you can control them. It should be read together with our Privacy Policy.
What cookies are
Cookies are small text files a website stores on your device to remember information. We also use similar browser storage (like local storage) for the purposes described here.
Your choice
When you first visit, a banner lets you accept or reject non-essential cookies. No analytics or advertising tag loads until you choose “Accept all”; we store your choice, and when you made it, in a cookie. Strictly necessary cookies run regardless, because the Service cannot work without them. If your browser sends a Global Privacy Control signal, we treat it as a rejection and do not show the banner. You can change your choice at any time by clearing your browser’s cookies for this site, which brings the banner back, or through your browser’s settings.
Strictly necessary (always on)
These cannot be switched off, because they are required to sign in and keep the Service secure.
| Name | Purpose | Duration |
|---|---|---|
| Supabase sign-in cookies (sb-*) | Keep you signed in and secure your session. | Session, renewed while you use the Service |
| ad_client_account | Remembers which workspace you are working in. | 30 days |
| puffly_cookie_consent | Remembers your cookie choice so we do not ask on every visit. | 1 year |
| ascended_google_oauth, ascended_meta_oauth | Protect the sign-in step when you connect Google Ads or Meta. | 10 minutes |
| puffly_age_blocked | Remembers on this browser that an age check was not passed, so the sign-up form cannot simply be tried again with another date. Contains no personal information. | 1 year |
| puffly_age_confirmed | Carries the fact that you passed the age check on the sign-up page through Google or Apple sign-in, so we do not ask twice. A timestamp only, never your date of birth. | 30 minutes |
| puffly_signup_method | Notes that you signed up with Google, for the page you land on next. | 10 minutes |
| Cloudflare Turnstile | Checks that a person, not a bot, is filling in a public request form. Cloudflare receives your IP address. | Session |
Preferences (local storage, always on)
| Name | Purpose | Duration |
|---|---|---|
| ascended-theme | Remembers light or dark mode. | Until you clear it |
| ascended-puff-wins | Remembers your last count of won jobs and good reviews, so Puff can celebrate new ones. | Until you clear it |
Site and ad measurement (only if you accept)
Google Analytics counts a page view on every page, and the Meta pixel records page views and signups, so we can tell which ads lead to accounts. They load only after you choose “Accept all”, and never when your browser sends a Global Privacy Control signal. Rejecting, or not choosing, does not affect your use of the Service. The pixel never loads on the booking, quote, review, request form, or unsubscribe pages our Customers send to their Leads, and neither tool reads what you type.
| Name | Purpose | Duration |
|---|---|---|
| Google Analytics (_ga, _ga_*) | Counts page views and signups, including the campaign tags and ad click ids on the link that brought you here. Page addresses are reduced so a sign-in code or a customer link token is not sent. | Up to 2 years |
| Meta pixel (_fbp, _fbc) | Measures whether our own ads on Facebook and Instagram lead to signups and paid plans. It reports page views and signing up. A completed subscription is reported from our server only if you accepted analytics cookies, with your email and account id hashed, plus your IP address and browser details, which also travel with your Stripe checkout. Meta uses this data under its own terms. | 90 days |
| This tab (session storage) | Remembers the campaign tags from the link that opened this tab, so a signup in the same tab can include them after Google or Apple sign-in. Cleared when you close the tab. Never stores what you type. | Until the tab closes |
Optional analytics (only after you accept)
These only run once you choose “Accept all” in the cookie banner.
| Name | Purpose | Duration |
|---|---|---|
| PostHog (ph_*) | Product analytics: page views, clicks, and signup and setup steps. Page text and element attributes are masked, so lead or message content is never captured. Honors Do Not Track. | Up to 1 year |
| puffly_first_touch | Remembers which campaign or website first brought you to us (campaign tags, referring domain, and first page only, never anything you type), so we can tell which marketing works. Saved with your account if you sign up. | 60 days |
We do not use any other advertising or cross-site tracking cookies. Rejecting these turns them off and does not affect your use of the Service.
Other sites
When you pay, you are taken to Stripe’s checkout, and when you connect an account you may sign in on Google, Meta, Slack, or another provider’s site. Those sites set their own cookies under their own policies.
Changes to this Policy
We may update this Cookie Policy from time to time. Material changes will be reflected by the “Last updated” date above.
Contact us
Shabtay Properties LLC
Houston, TX
hello@pufflyai.com
+1 713 410 1374