Skip to content

Cookie Policy

Last updated: 10 October 2026

This cookie policy explains how Shace AB ("Shace", "we", "us", "our") uses cookies and similar technologies on our platform and website shace.se. It describes what types of cookies we use, why we use them, and how you can control their use.

1. What are cookies?

Cookies are small text files stored on your computer, mobile phone, or other device when you visit a website. They enable the website to recognise your device and remember certain information about your preferences or previous actions.

There are two main types of cookies:

  • Session cookies are stored temporarily on your device while you visit the website and deleted when you close your browser.
  • Persistent cookies remain on your device for a certain period or until you remove them yourself.

2. How Shace uses cookies

a) Necessary cookies

These cookies are required for the website and platform to function correctly. They are always active and cannot be switched off. All of them are set by Shace (first-party cookies).

  • __Secure-better-auth.session_token: keeps you signed in to your account. Duration: 7 days, renewed while you use the service.
  • cookie_consent: remembers the cookie choices you have made, so we do not ask again. Duration: 12 months.
  • NEXT_LOCALE: remembers your language choice. Duration: session cookie, deleted when the browser is closed.
  • sidebar_state: remembers whether the sidebar is open or closed. Duration: 7 days.

b) Analytics cookies (only with consent)

With your consent, we use PostHog to understand how the service is used, for example which pages are visited and how features perform. This helps us improve the product. PostHog is configured to store this data on servers within the EU.

  • ph_*_posthog (where * is our project id): identifies your browser between visits and collects data about how the service is used, such as page views and clicks. Set by PostHog on Shace's behalf. Duration: 12 months.

With your consent, PostHog also stores corresponding identifiers in the browser's localStorage (see section 3). If you do not consent, no analytics cookies are set and no analytics identifiers are stored on your device. We then still collect anonymous visit statistics through PostHog, such as which pages are visited and which campaign or website you came from, without cookies or identifiers on your device. To tell visits apart, PostHog derives a temporary identifier from your IP address and browser on its servers. That identifier changes every day, so your visits cannot be linked from one day to the next or to you. If you withdraw your consent, the identifiers are removed.

c) Marketing cookies (only with consent)

With your consent, we use the Meta pixel and the Google tag to measure how our ads perform, for example whether a visit from an ad leads to an office request. The scripts are only loaded after you have consented.

  • _fbp: identifies your browser so that visits and submitted requests can be linked to our ads on Facebook and Instagram. Set by Meta. Duration: 90 days.
  • _fbc: stores the id of the Meta ad you clicked to get here. Read by Meta. Duration: 90 days.
  • _gcl_au: identifies your browser so that submitted requests can be linked to our ads on Google. Set by Google. Duration: 90 days.
  • _gcl_aw: stores the id of the Google ad you clicked to get here. Set by Google. Duration: 90 days.
  • _gcl_gb: the same for Google ad clicks from iPhones and iPads. Set by Google. Duration: 90 days.

Google may set further cookies with the _gcl_ prefix for the same purpose, and the Google tag also keeps the ad id in the browser's localStorage (see section 3).

With the same consent, and provided you also allow analytics cookies (the reports go through our analytics service), we report when an office request is started and submitted to Meta and to OpenAI (for ads in ChatGPT) from our servers, without any further cookies. What is shared is described in our privacy policy. If you do not consent, no marketing cookies are set and nothing is reported to these services. If you withdraw your consent, the cookies are removed.

In addition to cookies, we log certain events server-side when you use the service. That logging uses no cookies or storage on your device and is described in our privacy policy.

3. Similar technologies

In addition to cookies, the service uses the browser's localStorage and sessionStorage for functional purposes, for example to save drafts while you fill in forms and listings, and to keep sign-in and reset flows together. This information is stored only in your browser, is not used for analytics or marketing, and is not sent to third parties. The exceptions are the identifiers that PostHog and the Google tag store there with your consent, as described in section 2; they are removed if you withdraw your consent.

4. Third-party cookies

The third-party cookies we use are the analytics cookies from PostHog and the marketing cookies from Meta and Google described above, and they are only set with your consent. We do not allow other third parties to place cookies through our website.

5. How you can manage cookies

When you first visit our website, a cookie banner lets you choose whether to allow analytics cookies and marketing cookies. Necessary cookies are always active.

You can change your mind at any time:

  • Cookie settings on the website: click "Cookie settings" in the footer to reopen the settings and change or withdraw your consent. Withdrawing consent is as easy as giving it.
  • Browser settings: you can also set your browser to block or delete cookies. If you delete our cookies, the cookie banner will appear again on your next visit and you can make a new choice.

Please note that if you block necessary cookies, parts of the service, such as signing in, will stop working.

6. Changes to this policy

We may update this cookie policy, for example when we change how we use cookies or when laws change. The latest version is always available at shace.se.

7. Contact details

If you have questions about this cookie policy or our use of cookies:

Shace AB