FixWeb is operated by EGO HERO LLC. We use cookies sparingly. The full inventory below shows every cookie that may land on your device, what it does, and how long it stays. You can change your choices any time: .
For the broader picture of what data we collect and why, see our privacy policy.
By category
Strictly necessary
Required for the site to work. We don't ask consent for these — they're exempt under ePrivacy Art. 5(3) and GDPR recital 32.
sb-<project-ref>-auth-token
Holds your Supabase auth session so you can stay signed in. The cookie can last up to 400 days, but the session expires sooner.
sb-<project-ref>-auth-token-code-verifier
Short-lived PKCE code verifier for the Google or GitHub OAuth sign-in flow.
fixweb_anon_session
HMAC-signed opaque ID for a scan without sign-in. It lets you return to the result; after purchase it also lets you reopen the paid report.
fixweb_request_access
Grants this browser access to a purchased report.
fw_referrer
Remembers which partner link brought you to FixWeb so its offer can apply.
promo_intent
Keeps a promo code through sign-in.
fixweb_consent_v1
Records your cookie-consent choices. Required to honor your preferences.
Analytics
Help us understand which features people use. Off by default, set only after you accept analytics.
ph_<phc-key>_posthog
PostHog analytics identifiers and session information. Set only with analytics consent; PostHog may also use localStorage. Session replay is switched off.
How to opt out at the browser level
Beyond our consent banner, every modern browser lets you block or delete cookies. If your browser exposes the Global Privacy Control signal and you have not made an analytics choice, we treat it as a refusal of analytics. It does not override a choice you already made, and we do not process a Sec-GPC request header on the server.
Contact
Questions: privacy@fixweb.app.