Cookie & Tracking Policy

This policy explains how Bossy uses cookies and similar technologies on our website and app.

What we use

Strictly necessary — cookies required to run the service: signing you in, keeping your session, remembering your language preference, and protecting against abuse. The service does not work properly without these.

Analytics — we use PostHog and HeyCatch for product analytics and Vercel Analytics / Speed Insights for aggregate performance measurement. These help us understand how the product and site are used and where to improve. PostHog is configured to avoid capturing unnecessary personal data, with autocapture disabled in favor of deliberate, named events. HeyCatch is linked to your account identity (name and email) when you sign in, so usage can be understood per account.

Error & performance monitoring — we use Sentry to detect and diagnose errors and performance issues. This may include a session replay captured when an error occurs; replays are configured to mask all text, inputs, and media, so they do not record your personal content, and tokens are stripped from captured data.

Advertising — on our marketing website (bossyhq.com) we use Microsoft Advertising's tag. It sets cookies (_uetsid, _uetvid, _uetmsclkid) that tell us which of our ads bring people to the site and lead them to create a Bossy account. Microsoft may also use them to show Bossy's ads to people who have visited our website. The tag runs on our marketing website and once more when you create an account, to record that event; it does not run while you use the app. Microsoft receives your IP address, browser details, the pages you visit on our marketing website, and the fact that an account was created. It uses that data as an independent controller under the Microsoft Privacy Statement. You can turn off personalized ads from Microsoft at account.microsoft.com/privacy/ad-settings, and you can block or delete these cookies in your browser.

We do not sell data collected through cookies.

Your choices

Most browsers let you block or delete cookies through their settings. Blocking strictly-necessary cookies will break sign-in and core functionality. You can also opt out of marketing email separately at any time via the unsubscribe link in any marketing message.

Do Not Track

Because there is no industry-standard response to browser "Do Not Track" signals, Bossy does not currently respond to them. We limit analytics to what we need regardless of this setting.

Changes

We may update this policy as our tools change. The current version is always available here.

Contact

Questions: privacy@bossyhq.com.