Effective Date: 21 April 2026
This Cookie and Analytics Policy explains how Lemonade (“we”, “us”, “our”) uses cookies and similar technologies when you visit or interact with our platform at makelemonade.io. It should be read alongside our Privacy Policy and Terms of Service.
We are committed to transparency about the technologies we use. This policy tells you what cookies and tracking technologies we deploy, why we use them, and how you can control them.
Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work, to improve efficiency, and to provide information to the owners of the site. Cookies may be “session” cookies (which are deleted when you close your browser) or “persistent” cookies (which remain on your device for a set period or until you delete them).
We also use similar technologies such as local storage and session storage, which function in a comparable way to cookies and are covered by this policy.
These cookies are essential for the operation of our platform. Without them, the services you have requested cannot be provided. They include:
| Technology | Provider | Purpose |
|---|---|---|
| Authentication tokens | Supabase Auth | To keep you securely signed in and verify your identity across sessions |
| Session data | Supabase | To maintain your session state and preferences while using the platform |
| CSRF protection | Vercel | To protect against cross-site request forgery attacks and ensure secure form submissions |
Strictly necessary cookies are exempt from the requirement to obtain consent under the Privacy and Electronic Communications Regulations 2003 (PECR), as they are essential for the provision of the service you have requested.
We use analytics tools to understand how our platform is used, identify areas for improvement, and ensure we are delivering a good user experience.
| Technology | Provider | Retention | Purpose |
|---|---|---|---|
| Product analytics | PostHog | 24 months | To track page views, feature usage, and user journeys through the platform |
| Session replay | PostHog | 12 months | To record and replay user sessions for debugging and user experience improvement |
Data collected through analytics: Pages visited, clicks and interactions, device type and browser information, and session duration and navigation paths.
Analytics data is used solely for improving our platform and is never shared with third parties for advertising purposes.
Legal basis: Our use of first-party analytics is supported by the first-party analytics provision introduced by the Data (Use and Access) Act 2025, which permits the use of cookies and similar technologies for the purpose of obtaining statistical information about the use of an information society service, provided the data is collected and processed by the service provider itself.
We use marketing technologies to measure the effectiveness of our advertising campaigns and to show relevant ads to users who have visited our platform. These cookies only load if you accept marketing cookies in our cookie banner.
| Technology | Provider | Retention | Purpose |
|---|---|---|---|
| Meta Pixel (_fbp) | Meta Platforms, Inc. | Up to 90 days (cookies); up to 2 years (event data held by Meta) | To measure conversions from our ads on Facebook and Instagram, and to show relevant ads to users who have visited our platform |
Data collected: Page visits, button clicks, device and browser information, and a hashed identifier that Meta uses to match activity to a Facebook or Instagram account where possible.
Legal basis: Consent. These cookies only load after you have accepted marketing cookies in our cookie banner, in line with the Privacy and Electronic Communications Regulations 2003 (PECR) and Article 6(1)(a) of the UK GDPR. You can withdraw consent at any time by changing your cookie preferences.
Our email communications may include technologies that help us understand how you interact with our emails:
| Provider | Tracking | Purpose |
|---|---|---|
| Customer.io | Email opens and link clicks | To measure the effectiveness of our communications and ensure we send relevant content |
| Resend | Delivery status | To confirm successful delivery of transactional emails and identify delivery issues |
Legal basis: Legitimate interests - we have a legitimate interest in understanding whether our emails are being received and engaged with, in order to maintain and improve our communication with users.
We believe in a privacy-first approach. We want to be clear about what we do not do:
You have several options for managing cookies and tracking technologies:
Data collected through cookies and tracking technologies is retained for the following periods:
Some of the data collected through cookies and tracking technologies may be transferred to servers outside the United Kingdom:
Where data is transferred internationally, appropriate safeguards are in place as described in Section 12 of our Privacy Policy, including Standard Contractual Clauses and the UK International Data Transfer Agreement.
We may update this Cookie and Analytics Policy from time to time to reflect changes in the technologies we use, legal requirements, or our business practices. We shall provide at least 14 days' notice of any material changes by updating the effective date at the top of this page and, where appropriate, notifying you by email.
If you have any questions about our use of cookies or this policy, please contact us at privacy@makelemonade.io.