Privacy Policy
Last updated: June 8, 2026
This is a working privacy policy for the L1 private build phase. It will be expanded before any external user invitation.
What we collect
When you visit Yotzer, we use PostHog to record pseudonymous usage events that do not directly identify you. These include page views, time spent on a page, the URL you arrived from, your approximate region based on IP address, and basic device information such as browser type and screen size. We do not collect your name, email, or any account data on the landing page. Account data is only collected after you sign up, and is covered by a separate signup flow.
Why we collect it
We use this data to understand which parts of Yotzer are useful and which need improvement. We do not run advertising. We do not share usage data with third parties for marketing purposes. We do not track you across other websites.
Where it is stored
PostHog hosts our analytics data in their EU region, in Frankfurt, Germany. Data does not leave EU jurisdiction. PostHog acts as a data processor on our behalf.
Error monitoring
We use Sentry to detect and diagnose software errors. When an error occurs in your browser, Sentry receives the error message, stack trace, browser type, and operating system. Sentry derives an approximate region from your IP address at ingestion, then discards the IP. We do not use Sentry Session Replay. Sentry hosts our error data in their EU region. Sentry acts as a data processor on our behalf. You are able to read Sentry's own privacy documentation at sentry.io.
Processors we use
We use a small set of third-party processors to run Yotzer. Each one handles a specific function, and several are hosted in the EU. Entries marked as not yet active describe tools for features that are not live yet.
- Supabase (Frankfurt, eu-central-1) Database, authentication, and user records. Hosted in the EU.
- Hetzner (CPX22, Nuremberg, Germany) Long-running worker processing. Hosted in the EU.
- Cloudflare R2 Generated assets and cold storage.
- Vercel Frontend hosting and API routes.
- Doppler Secrets management.
- PostHog (Frankfurt, EU region) Product analytics. Hosted in the EU.
- Sentry (EU region) Error monitoring. Hosted in the EU.
- Better Stack Uptime and log monitoring.
- Anthropic API User-submitted content sent for text generation.
- OpenAI (GPT Image) Image generation. Not yet active (planned for a later release).
- Fish Audio Voiceover generation. Not yet active (planned for a later release).
How long we keep it
Usage events are kept in line with PostHog Cloud retention defaults. You are able to read PostHog's own privacy documentation at posthog.com for the current retention schedule.
Your rights
Under GDPR and similar privacy laws, you have the right to access the data we hold about you, to correct inaccurate data, to request deletion, to request a copy in a portable format, to restrict processing, to object to processing, and to lodge a complaint with your local data protection authority. To exercise any of these rights, write to privacy@yotzer.app and we will respond within 30 days.
Cookies we set
Yotzer uses a small set of cookies. Strictly necessary cookies are always active because the service needs them to work. Analytics cookies are set only after you accept.
Strictly necessary, always active
- sb-* keeps you signed in and maintains your session. Set by Supabase authentication.
- yotzer_locale remembers your language preference.
- yotzer_locale_ack records that you made a language choice, so we do not prompt you again.
- yotzer_consent records your cookie choice. It expires after 12 months.
Analytics, only with your consent
- ph_* PostHog cookies that record pseudonymous usage analytics. Set only after you click Accept. If you decline, PostHog runs in a cookieless mode that stores nothing in your browser.
Changed your mind? You can update your choice at any time.
How to withdraw consent
To withdraw consent, clear the yotzer_consent cookie in your browser. The banner will reappear on your next visit and you are able to choose Decline. You are also able to write to privacy@yotzer.app and we will process your withdrawal request. You can use the Cookie Preferences control in the page footer, or on this page, to change your choice at any time.