Cookie Policy
Last Updated: January 2026
Cookie Policy & Consent Framework
Version 1.2, June 2026 Entity: Journey Bound Media, LLC dba DecodeIQ Jurisdiction: State of New Mexico, United States Contact: Privacy Email
1. Purpose
DecodeIQ uses cookies and equivalent tracking technologies to maintain platform functionality, measure performance, and run analytics. Analytics runs by default. You can opt out at any time. Marketing integrations, if any are added, run only with your consent. This policy explains each category, its function, and how you can control them.
All tracking follows a Source-First Transparency Model: each tag is explicitly declared, purpose-scoped, and easy to opt out of.
2. Cookie Categories
| Category | Examples | Purpose | Default State | Legal Basis |
|---|---|---|---|---|
| Strictly Necessary | Session token (supabase-auth), Stripe checkout cookies | Secure login, subscription and payment processing | Always On | Contract / Legitimate Interest |
| Functional | Tracking preference (diq-tracking-consent), banner state (diq-banner-dismissed) | Remember your tracking choice | On by default | Legitimate Interest |
| Analytics | PostHog, Google Analytics | Measure usage, latency, and feature adoption | On by default (opt-out) | Legitimate Interest |
| Marketing | LinkedIn Insight Tag, Reddit Pixel, X Pixel, Meta (Facebook / Instagram) | Attribute campaigns and audiences | Off until consent | Consent |
No cookies are used for behavioral profiling or data sale.
3. Opt-Out Management Logic
3.1 Storage Mechanism
Your preferences are stored in two first-party cookies, each valid for 12 months:
- diq-tracking-consent: "granted" by default, "denied" once you opt out.
- diq-banner-dismissed: set when you close the banner so it does not show again.
3.2 Flow
- Default: analytics loads on page load unless you have opted out.
- Banner Display: a small notice appears at the bottom of the page until you opt out or dismiss it.
- Opt Out: stops PostHog, sets Google Analytics to a denied consent state, and writes diq-tracking-consent=denied.
- Dismiss: closes the banner and leaves analytics on (implicit accept).
- Returning Visits: if diq-tracking-consent is "denied", analytics does not load.
3.3 Framework Compliance
- Uses Google Consent Mode v2 signals for Google Analytics.
- Compatible with an external CMP (such as OneTrust or IAB TCF) if one is added later.
- Honors a prior rejection recorded under our previous opt-in banner.
4. Individual Tracker Details
4.1 Analytics
PostHog – in-app event telemetry (anonymous ID, feature usage, latency) Google Analytics 4 – page views and aggregate engagement metrics IP anonymization enabled (anonymize_ip=true)
4.2 Marketing Integrations
Loaded only when marketing:true:
- LinkedIn Insight Tag – conversion & audience analytics
- Reddit Pixel – campaign attribution
- X Pixel – ad reach & conversions
- Meta Pixel – cross-platform engagement tracking
All send hashed or pseudonymous IDs only; no personal content or analysis data is transmitted.
5. Retention & Expiration
| Type | Lifespan | Controller |
|---|---|---|
| Session Cookies | Session | DecodeIQ / Stripe |
| Preference Cookies (diq-tracking-consent, diq-banner-dismissed) | 12 months | DecodeIQ |
| Analytics Cookies | 26 months (Google Analytics default) | Google LLC |
| Marketing Pixels | 90–180 days | LinkedIn, Meta, X, Reddit |
Users may delete cookies manually at any time through browser settings.
6. Opting Out
At any time, click "Opt Out" on the cookie banner, or contact us at Privacy Email. This stops analytics collection and records your choice for 12 months. You can also clear your browser cookies to reset the banner.
7. Updates to This Policy
DecodeIQ reviews cookie usage quarterly or when a new tracker is added. Material changes trigger a renewed consent banner.
8. Contact
Journey Bound Media, LLC dba DecodeIQ Albuquerque, New Mexico, USA Privacy Email
Effective Date: June 22, 2026 Version: 1.2