Effective date: October 8, 2026

This notice explains how Loyaltree uses cookies and similar technologies, including browser cookies, local storage, and session storage, on the website and in the web application.

1. Why we use them

Loyaltree uses these technologies mainly for strictly necessary purposes such as authentication support, CSRF protection, session continuity, company-context handling, recent-company or service-context support, language preference, theme or interface state, guest-card or sign-up continuity, and temporary checkout or redirect state. In addition, with your prior consent, we use the Meta Pixel for marketing and advertising measurement, and PostHog for product analytics, session replay, and error monitoring. The Meta Pixel is never loaded until you opt in. Before you choose, our server does report page views of our marketing pages to Meta anonymously: only the page address without its query string, the time and your browser's user-agent string, never your IP address, a cookie or another identifier. This stops if you refuse advertising. PostHog is not loaded until you allow analytics: before that it measures nothing, sets no cookie or local storage, and records no session. Allowing analytics enables the analytics cookie, session replay (with everything you type masked) and error reports described below, and links events to your account once you sign in; refusing or withdrawing stops analytics entirely.

2. Categories used

• Strictly necessary cookies: for example refresh/session-related cookies and CSRF cookies required to log in securely and submit protected requests
• Marketing cookies (consent required): the Meta Pixel from Meta Platforms Ireland, which sets cookies such as _fbp and _fbc (typically stored for up to 90 days) to measure advertising and website conversions. These load only after you allow advertising, and are never set if you refuse it.
• Analytics cookies (consent required): PostHog, which sets a ph_<project token>_posthog cookie and a matching local-storage entry (typically stored for up to 12 months) to measure product usage, replay sessions, and report errors. These load only after you allow analytics, and are never set if you refuse it.
• Local storage: for example language preference, theme choice, recent-company lookups, selected company or location hints, and limited UI state such as active settings tab or session hints
• Session storage: for example temporary checkout state such as a selected plan, guest-card or sign-up continuity values, payment-banner dismissal state, or temporary redirect data during sign-up or payment flows
• Other similar storage: browser-managed values needed to keep the web app functioning as intended

3. Consent

Where a cookie or similar technology is strictly necessary to provide the service requested by the user or to secure the service, consent may not be required under applicable ePrivacy rules. Non-essential marketing and analytics cookies, including the Meta Pixel and PostHog, are loaded only after you give explicit opt-in consent through our cookie banner. The banner asks about two purposes separately, analytics (PostHog) and advertising (Meta): you can allow both, neither, or one without the other, and neither is pre-selected. No analytics of any kind runs before you allow analytics. The anonymous page-view report to Meta described above is the only measurement before your choice: it places nothing on your device and stops if you refuse advertising. On merchant subdomains no cookie banner is shown, and no analytics or advertising runs there. You can withdraw either consent at any time using the "Manage cookies" control below or in the footer; withdrawing stops further tracking for that purpose and reloads the page so the tracker is no longer active. Events Meta has already received cannot be recalled. On our marketing pages the banner is shown until you make a choice; if you refuse both purposes, we ask again after 90 days at the earliest, and never on app or sign-in pages. A choice made in an earlier version of the banner, which did not separate the two purposes, is kept if it was a refusal and asked again if it was an acceptance.

4. Managing storage

You can review or change your cookie choice at any time using the "Manage cookies" control on this page or in the footer. You can also control cookies and browser storage through your browser settings. Blocking necessary storage may prevent login, payment, language, or security-related features from working correctly.

5. Contact

Questions about this notice can be sent to:

[email protected]