Cookie Policy

Our Stance on Privacy

At JottoGo, we believe your data is yours. We do not sell browsing habits to data brokers, we do not use Google Analytics or Facebook pixels, and we do not build retargeting audiences from your guest stays. Limited Google Ads conversion measurement on our marketing site when a host completes Express Setup after clicking our ad — no guest data, no remarketing, no Google Analytics.

The cookies we use

We do not show a broad “Accept All Cookies” banner because we avoid optional marketing trackers. We use strictly necessary cookies plus one limited measurement cookie when you arrive from our Google Ads:

• Login session — secure tokens managed by Supabase so you stay signed in between pages. Without these, you would need a new 6-digit email code on every click.
• Sign-in bot protection — Cloudflare Turnstile on host and crew login (see below). Security cookies only; not used for advertising or cross-site tracking.
• Google Ads click identifier — cookie jg_google_ads_click on jottogo.com and app.jottogo.com (production only). When you arrive from a Google Ad, we may store a first-party click identifier (gclid, gbraid, or wbraid) for up to 90 days so we can attribute a completed Express Setup to the ad click. We do not send guest data or host email addresses to Google.

Google Ads conversion measurement

On jottogo.com and app.jottogo.com (production only), we load the Google Ads tag to record when a host completes Express Setup after clicking our search ad. The conversion fires once per account. We do not use this tag on staging, preview, or localhost, and we do not send guest data or host contact details to Google.

• No Google Analytics, Facebook pixels, or retargeting audiences
• No Enhanced Conversions or sending host email, name, or phone to Google
• No remarketing lists built from your dashboard activity or guest stays

See Google's Privacy Policy and our Privacy Policy (Google Ads section).

Sign-in bot protection (Cloudflare Turnstile)

On host login, crew login, and other sign-in flows where we verify you are not a bot, Turnstile runs before we send a one-time sign-in code. It may set strictly necessary cookies or similar storage for that security purpose only. See Cloudflare's Turnstile Privacy Addendum and Cookie Policy, and our Privacy Policy (Turnstile section).

Your Control

You can instruct your browser to refuse all cookies, but please note that if you block our login session or Turnstile security cookies, you will not be able to securely sign in or use your JottoGo dashboard. Blocking the Google Ads click cookie only affects our ability to attribute an Express Setup completion to an ad click.

Questions?

If you have any questions about how we handle data, please reach out to us.