1. About this policy
This Cookie Policy explains how Mana Agents LLC, doing business as Mana (“Mana,” “we,” “us,” or “our”), uses cookies and similar browser technologies on
withmana.ai.
In this policy, “cookies” also includes local storage and other technologies that store or access information in your browser. This policy should be read with our
Privacy Policy.
This policy covers the public Mana marketing site. A Mana platform deployed for a business customer may use essential authentication or security cookies. Those services are governed by the applicable customer agreement and privacy documentation.
2. Our consent model
Google Analytics operates when you visit the site so we can measure traffic, acquisition, and conversion events. It is not controlled by the optional session-analytics choice.
PostHog product analytics and privacy-masked session replay are optional. PostHog does not initialize unless you select “Accept.” If you decline or make no choice, PostHog stays off.
We store your PostHog choice locally so we can apply it on later visits.
We do not use advertising cookies, cross-site advertising pixels, or analytics data for targeted advertising.
3. Browser storage inventory
The inventory below lists the cookies and similar technologies used by the current marketing-site configuration. Provider-generated suffixes may vary, but the purpose and duration remain the same.
mana.analytics-consent.v1
- Provider
- Mana
- Type
- Local storage
- Purpose
- Remembers whether you accepted or declined optional PostHog session analytics so we can honor your choice.
- Duration
- Until you change your choice or clear this site's data.
_ga
- Provider
- Google Analytics
- Type
- First-party cookie
- Purpose
- Stores a randomly generated client identifier used to distinguish browsers and calculate visitor and session statistics.
- Duration
- Up to 2 years. Google may renew the expiration when you revisit the site.
_ga_<measurement-id>
- Provider
- Google Analytics
- Type
- First-party cookie
- Purpose
- Maintains session state for this site's Google Analytics data stream. The suffix varies by measurement ID.
- Duration
- Up to 2 years. Google may renew the expiration when you revisit the site.
ph_<project-token>_posthog
- Provider
- PostHog
- Type
- Local storage
- Purpose
- Stores an anonymous browser identifier, session state, and analytics settings used for product analytics and privacy-masked replay.
- Duration
- Up to 365 days, or until consent is withdrawn or site data is cleared.
ph_<project-token>_posthog__flags
- Provider
- PostHog
- Type
- Local storage
- Purpose
- Stores PostHog configuration and feature-flag evaluation state used by the analytics SDK.
- Duration
- Up to 365 days, or until consent is withdrawn or site data is cleared.
__ph_opt_in_out_<project-token>
- Provider
- PostHog
- Type
- Local storage
- Purpose
- Records PostHog's analytics opt-in state after you accept analytics.
- Duration
- Up to 365 days, or until consent is withdrawn or site data is cleared.
4. Google Analytics 4
Purpose. We use Google Analytics 4 (“GA4”) to understand how visitors find and use the site and whether important actions, such as selecting a roadmap link, occur.
Information collected. GA4 may collect page URLs and titles, referring pages, session statistics, clicks, scrolling, outbound-link activity, browser and device information, approximate location, and conversion events. Google uses an IP address at collection time to derive coarse location and route the request, then discards it before the address is logged or stored in GA4.
Our GA4 implementation disables Google Signals and advertising-personalization signals. We do not use Google Analytics for targeted advertising, and our custom events do not include names, email addresses, phone numbers, company names, messages, or form contents.
5. PostHog analytics and session replay
Purpose. We use PostHog to understand page use, navigation, roadmap-link interest, performance, dead clicks, heatmaps, and usability problems. PostHog data is sent to its United States cloud service.
Information collected. PostHog may collect an anonymous browser and session identifier, page paths, referrers, clicks on links and buttons, scrolling and navigation, performance timing, browser and device information, IP address and approximate location, and custom analytics events. URL query strings and fragments are removed before PostHog events are sent. We do not create named PostHog visitor profiles.
Privacy-masked replay. Session replay reconstructs page structure and interactions so we can diagnose usability problems. It is not a camera recording. Our configuration masks all page text, form inputs, and element attributes. It excludes request and response headers and bodies, cross-origin iframes, console logs, and form contents. PostHog session recordings are configured for 30-day retention.
Learn more in PostHog’s
Privacy Policy.
6. How long analytics information is kept
The browser-storage durations are listed in Section 3. Declining or withdrawing optional session analytics removes the PostHog browser storage that our site can remove. It does not remove Google Analytics cookies.
Google Analytics user-level and event-level retention is controlled through the GA4 property settings and Google’s applicable terms. GA4 standard properties support 2-month or 14-month user and event retention settings; aggregated reports may remain available longer.
PostHog session recordings are retained for 30 days under the current project setting. Product-analytics events are retained under the current PostHog project setting and may be kept for up to 84 months unless deleted sooner.
We may retain aggregated or de-identified statistics that no longer reasonably identify a browser or visitor.
7. Change or withdraw your choice
Use the Privacy choices control in the website footer at any time. Selecting “Decline” stops PostHog product analytics and session replay, removes PostHog browser storage that our site can remove, and reloads the page without PostHog.
Google Analytics remains active regardless of the optional PostHog choice. You can delete or block Google Analytics cookies through your browser settings.
Our PostHog configuration also honors supported Do Not Track browser signals.
8. Third-party processing and international transfers
Google Analytics and PostHog act as our analytics service providers when enabled. They process information on our behalf under applicable terms and may process information in the United States and other countries where they or their subprocessors operate. Google Analytics is active when configured. PostHog is active only after optional session analytics are accepted.
Privacy and data-protection laws may differ between countries. Where required, the providers use contractual and other transfer safeguards described in their privacy and data-processing documentation.
9. Changes and contact
We may update this policy when we add, remove, or reconfigure browser storage, when provider behavior changes, or when legal requirements change. The date at the top shows the latest revision.
Questions or privacy requests can be sent to Mana Agents LLC at
privacy@withmana.ai. If that address is unavailable, contact
hello@withmana.ai.