Cookie and Similar Technologies Policy
Effective 15 September 2026 · Last updated 15 September 2026 · Version 1.3
This policy explains how IDFALCON PTY LTD (ABN 12 684 389 188) uses cookies and similar browser technologies on fetchthemark.com (the Website) and portal.fetchthemark.com (the Portal).
The native Fetch mobile application does not use browser cookies. It uses device storage and software-development kits described in our Privacy Policy.
1. What these technologies are
A cookie is a small text value a website stores in a browser. Local storage is browser storage that remains until code or the user removes it. These technologies can maintain a secure sign-in, remember a preference, protect a form, measure use or remember where a visit came from.
Provider-generated names can include a project identifier. Durations below are expected maximums or provider-controlled periods; a value may disappear sooner when you sign out, clear browser data, use private browsing or the provider rotates it.
2. Technologies we use
Essential and security
These provide a feature you request or protect the Service. Blocking them can prevent sign-in, account security, checkout or a protected form from working.
| Name or pattern | Surface/provider | Purpose | Duration |
|---|---|---|---|
sb-*-auth-token and related sb-* | Portal / Supabase | Authenticates and securely refreshes a signed-in session | Session or configured token life; refreshed while signed in |
fetch_consent | Website and Portal / Fetch | Records whether you accepted or refused product analytics, so your choice is honoured and you are not asked again | 6 months |
cf_clearance (only when issued) | Website/Portal / Cloudflare | Records that a browser passed a security challenge | Configured Cloudflare challenge-passage period |
Cloudflare Turnstile also processes a short-lived challenge token and technical request
information to distinguish people from automated abuse. It may work without setting cf_clearance; that cookie is not present for every visitor.
Stripe Checkout and its billing portal are hosted on Stripe's domain. Stripe may set essential security, fraud-prevention and payment cookies there; Stripe's own notices apply to those pages.
Preferences and functionality
| Name or pattern | Surface | Purpose | Duration |
|---|---|---|---|
theme (local storage) | Website | Remembers light or dark appearance | Until deleted |
sidebar_state | Portal | Remembers whether navigation is open | 7 days |
fetch-portal-large-text (local storage) | Portal | Remembers the large-text accessibility setting | Until deleted or switched off |
fetch-portal-tour-done, fetch-portal-tour-dismissed, fetch-portal-tour-pending (local storage)
| Portal | Remembers onboarding-tour progress or dismissal | Until deleted or reset |
fetch_analytics_opt_out (superseded) | Website and Portal | An earlier opt-out flag. Still honoured as a refusal if your browser has one, but no
longer set: fetch_consent replaces it | 1 year |
Product analytics and attribution
Analytics helps us understand aggregate use and improve the Service. It is enabled only in production, not development or preview environments, and it is not enabled at all unless you accept it first. We do not use advertising, retargeting or social-media tracking cookies.
| Name or pattern | Surface/provider | Purpose | Duration |
|---|---|---|---|
ph_*_posthog or equivalent ph_* browser storage | Website/Portal / PostHog | Pseudonymous browser identifier and page or route use | Up to 1 year |
attr-utm_source, attr-utm_medium, attr-utm_campaign, attr-utm_content, attr-utm_term and similar attr-utm_* keys, plus
attr-first-touch-captured (local storage)
| Website / Fetch | Remembers the first referral or campaign associated with a form | Until deleted |
ab-test-* (local storage) | Website / Fetch | Keeps a visitor in the same A/B-test variant | Until deleted |
Website PostHog creates person profiles only for identified users; ordinary Website visitors are not identified to it. Portal PostHog disables automatic element capture, query-string capture and session recording and creates no PostHog person profile. PostHog can still receive the pseudonymous identifier, page or route, browser/device details, the IP address needed for the network request and deliberately sent interactions. See our Privacy Policy for provider and overseas-processing details.
Content loaded from other domains
The Website's Port Phillip demonstration map loads nautical chart tiles from Mapbox. Mapbox receives the standard tile request (your IP address and the map area shown) but not your identity or any Fetch account, and we set no cookie or browser storage for it. The analytics choice below does not affect the map, which is page content rather than analytics. Web fonts and the map library itself are served from our own domain rather than a third-party content-delivery network, so loading a Fetch page makes no request to a font or script host.
3. Your choices
Checking this browser's analytics setting…
Your choice applies to the Website and Portal in this browser, does not remove essential authentication or security values, and does not affect the native App. Our analytics also respects a supported browser Do Not Track signal.
Prior consent everywhere. Nothing non-essential is stored or read until you choose. Product analytics, attribution and A/B-test values stay off, and we show a short banner with an Accept and a Reject button of equal prominence. Closing the banner without choosing is not consent, and nothing starts. A refusal is remembered so you are not asked again, and you can change your mind in either direction using the controls above at any time. Withdrawing is as easy as accepting. Sign-in, security and the preference settings you choose yourself are unaffected.
You can block or delete cookies and local storage in browser privacy settings. Clearing storage removes preferences and attribution/A/B-test values; blocking essential values can sign you out or prevent protected forms from working. Refusing or withdrawing affects future analytics. For access to or deletion of information already associated with you, follow our Privacy Policy.
4. Third-party sites
Links can take you to a club, app store, payment provider or other third-party site. That site decides which cookies it uses. This policy does not cover a third party merely because Fetch links to it.
5. Changes
We may update this policy when the Service, providers or law changes. We will update the version and date above, give appropriate notice of a material change, and seek consent before using these technologies where applicable law requires it.
6. Contact
IDFALCON PTY LTD (ABN 12 684 389 188)
privacy@fetchthemark.com