cookie policy
last updated: May 23, 2026
Webnation AB uses cookies to run Hubbub, remember your preferences, and (optionally) understand how you use it. this policy explains what cookies we use and how to control them.
1. what are cookies?
cookies are small text files your browser stores. they help websites recognize you and remember your choices.
2. our cookies
strictly necessary
these cookies make Hubbub work. your browser or privacy settings can't block them.
| name | purpose | duration | set by |
|---|---|---|---|
| `auth_token` | login & session | 12 hours | Hubbub |
| `csrf_token` | form security | session | Hubbub |
| `theme_preference` | dark/light mode | 1 year | Hubbub |
| `ui_preferences` | sidebar state, tooltips | session | Hubbub |
why needed: without auth cookies you'd log in every time. CSRF tokens stop account takeover attacks. theme memory improves usability.
can you disable them? no. the service won't work.
preference cookies
optional cookies that remember your choices.
| name | purpose | duration | set by |
|---|---|---|---|
| `thememodeoverride` | explicit light/dark preference | 1 year | Hubbub |
| `sidebar_collapsed` | sidebar open/closed state | 1 year | Hubbub |
can you disable them? yes, via browser settings. disabling means your preferences won't carry across sessions.
analytics cookies (opt-in)
we use PostHog (EU region, eu.i.posthog.com) to learn how people use Hubbub. PostHog is off by default — nothing is sent until you opt in. once you do, PostHog stores a session ID and tracks:
| service | identifier | purpose | duration | control |
|---|---|---|---|---|
| PostHog | `phphc....` | pseudonymous analytics id | 1 year | toggle in account settings → Privacy |
what PostHog sees:
- pages you visit in Hubbub (URL + locale + dwell time)
- every button and link click — element label and CSS selector, not what you typed (autocapture)
- semantic events: e.g. `signupcompleted`, `presentationcreated`, `slideadded`, `votesubmitted`
- your browser and device type
- a pseudonymous account id + workspace only while you're signed in — we do not send your email or name to PostHog; if we need to reach you about an issue we look the id up in our own database
what PostHog does NOT see:
- no session recordings / replays — we do not capture video of your screen or sessions at all
- the actual text of slides, audience answers, or Q&A questions
- your email, name, or passwords
- payment info (Stripe handles that on its own domain)
- your activity outside Hubbub
how to control it: PostHog starts in opt-out mode. our banner and your account settings let you toggle consent on/off; we save your choice in localStorage (`hubbub-analytics-consent`) and remember it forever. revoking consent stops all capture immediately, and you can request deletion of past data via info@webnation.se.
PostHog privacy: https://posthog.com/privacy
marketing cookies
we do not use marketing or advertising cookies. we don't track you across sites or let advertisers place cookies here.
3. how to control cookies
in your browser disable cookies via your browser settings:
- chrome: settings → privacy & security → cookies and site data
- firefox: preferences → privacy & security → cookies and site data
- safari: preferences → privacy → manage website data
- edge: settings → privacy → clear browsing data
on Hubbub when you visit, a consent banner asks which categories you allow. "accept all" enables everything. "reject" or "preferences" lets you pick.
specific controls - PostHog analytics: off by default; toggle in your account settings under Privacy - strictly necessary: can't disable (breaks the service) - preference cookies: clear anytime in browser settings
4. third-party cookies
we don't let advertisers place cookies here. but third-party services we integrate with may set their own:
| service | cookies | your control |
|---|---|---|
| Stripe (checkout only) | session ID, fraud checks | stripe privacy policy |
| Google (if you choose Sign in with Google) | Google session | google privacy policy |
| specific.dev (hosting) | edge routing, monitoring | specific.dev privacy policy |
see our privacy policy and sub-processors page for details on each.
5. where your data goes
PostHog's EU region keeps analytics data in the EEA. Stripe, Resend, Sentry, and Google may process operational data in the US under standard contractual clauses plus supplementary safeguards. see our privacy policy for full details.
6. Hubbub without cookies
you can disable all non-essential cookies. Hubbub still works, but:
- you log in each session
- your preferences don't carry over
- we don't collect analytics
7. changes
we may update this policy anytime. changes are live when posted. major updates get announced via email.
8. questions?
Webnation AB
info@webnation.se