Last updated: 20 June 2026
Cookie Policy
What are cookies?
Cookies are small text files stored on your device by your browser when you visit a website. They help sites remember your preferences and understand how you use them. This policy also covers similar browser storage (such as local storage) where we note it.
How we use cookies
We use the following categories of cookies:
| Type | Purpose | Can be disabled? |
|---|---|---|
| Essential / strictly necessary | Authentication, session management and security. Required for the platform to function. | No |
| Analytics | Usage data to help us improve the platform. Once you are signed in this includes an account identifier, so it is pseudonymised rather than anonymous. | Yes |
Third-party services
We keep third parties to a minimum. The services below may store data in your browser:
- Google Analytics 4 (Google LLC) — used for aggregate site performance optimisation and traffic analysis. It records page views, session duration, approximate location (country/region) and device or browser type; it never receives your name or email from us. Analytics is denied by default and only runs if you accept it (see Google Consent Mode v2 below). Google retains this analytics event data for up to 14 months. See Google’s privacy policy.
- PostHog (PostHog Inc., EU Cloud) — used to understand how the product is actually used: which features people adopt, where they get stuck, and which errors they hit. Hosted in the European Union. It records the pages and screens you visit, the actions you take within the app, your device or browser type, and — once you are signed in — an account identifier so we can tell whether a change actually improved things for real users. It never receives your name or email from us. PostHog is denied by default and only runs if you accept analytics cookies.
Session recording. Where you have accepted analytics cookies, PostHog also records your session in the app — a replay of the pages you saw and where you clicked — so we can see where the product is confusing without having to ask you. Everything you type into a form is masked and is never recorded. We additionally mask the details of the professional contacts you store (such as your vet or farrier), so their names and telephone numbers do not appear in recordings. Recordings are deleted automatically after 90 days. If you would rather not be recorded, decline analytics cookies — the platform works exactly the same either way.
See PostHog’s privacy policy. - AWS Cognito (Amazon Web Services) — our primary authentication provider, using essential security and session-management storage to keep you securely signed in. On the web app these session tokens are held in your browser’s local storage rather than as HTTP cookies. They are strictly necessary and cannot be disabled while you are signed in.
Cookies and storage we set
The specific identifiers we use are:
| Name | Provider | Type / purpose | Lifespan |
|---|---|---|---|
| _ga | Google Analytics 4 (Google LLC) | Analytics: distinguishes unique visitors across our subdomains. | 2 years |
| _ga_* | Google Analytics 4 (Google LLC) | Analytics: maintains unique session state. | 2 years |
| ph_phc_* | PostHog (EU Cloud) | Analytics: identifies your browser so we can understand how features are used and where people get stuck. | 1 year |
| mms_consent | ManageMyStable | Essential: remembers your cookie choice so we don’t ask again (shared across our subdomains). | 180 days |
| CognitoIdentityServiceProvider.* † | AWS Cognito / ManageMyStable | Essential: maintains your secure logged-in session across the web and mobile apps. | Session / persistent (until you sign out) |
† Stored in your browser’s local storage (Amplify’s default token store on web), not as an HTTP cookie.
Google Consent Mode v2
We use Google Consent Mode v2 in its basic configuration. By default, analytics tracking is disabled (denied), and the Google Analytics script is not loaded onto the page at all until you explicitly choose to accept analytics cookies. If you decline, no analytics script is downloaded, no tracking cookies are stored, and nothing is sent to Google — not even the anonymous "operational pings" that Google's advanced configuration would otherwise transmit. To ensure a seamless user experience, your choice is respected across our marketing site and application subdomains (managemystable.com and its subdomains).
PostHog is treated exactly the same way. If you decline analytics, PostHog is never loaded — no events are recorded and no session recording takes place. If you accept and later change your mind, analytics stops as soon as you save the new choice.
Managing cookies
You can change your choice at any time using the Cookie settings link in the footer (or the cookie banner), which reopens the consent options. You can also control cookies through your browser settings. Disabling essential cookies may affect how the platform works.
Contact
Questions? Email hello@managemystable.com.