Cookie Policy

Last Updated: October 19, 2026

This Cookie Policy explains how Dive Connect, LLC ("DiveConnect," "we," "our," "us") uses cookies and similar technologies on the DiveConnect.ai website and dashboard. It should be read together with our Privacy Policy.

1. What Are Cookies?

Cookies are small text files placed on your device when you visit a website. We also use related technologies such as browser local storage and pixels or tags. We refer to all of these as "cookies" here. Cookies can be set by us ("first-party") or by a third party we use ("third-party"), and can be deleted when you close your browser ("session") or persist until they expire or you delete them ("persistent").

2. How We Use Cookies

We use cookies to keep you signed in, to keep the service secure, to remember your preferences, and — with your consent — to understand usage. We group cookies into three categories.

A. Strictly necessary (always on)

These are required to operate the service and cannot be switched off. They include:

• Supabase auth session — keeps you signed in and authenticates requests.
• dc_cookie_consent_v1 — remembers your cookie choices so we don't ask again (stored in local storage).
• Stripe — security and fraud prevention during checkout and billing.
• Sentry — error and performance monitoring, so we can keep the service secure and reliable. This runs on a legitimate-interest basis and is not used for advertising or cross-site tracking.

B. Analytics (consent required)

These help us understand how the dashboard and storefront are used so we can improve them. They are only set after you consent, and include:

• Vercel Web Analytics — privacy-friendly traffic and page-performance measurement.
• Our own analytics (/api/analytics) — first-party page-view and feature-usage events we record ourselves; no third party is involved.
• dc_ref (local storage, on a dive shop's website) — when you arrive through a link the shop posted on social media and have accepted analytics, remembers that link's short code for 7 days so a booking you make later in the visit is credited to that post in the shop's own reports. It holds only the link code (the same for everyone who tapped it), never an identifier for you. Without consent nothing is stored — the code only travels in the page address — and a stored code is removed when you withdraw consent.
• PostHog — product analytics: page and feature usage, repeated or unresponsive clicks, and browser errors, plus session replay so we can see where the service is hard to use. Everything you type is masked in replays, and on dashboard pages all on-screen text is masked as well.
• Sentry session replay — a replay of a sample of sessions and of sessions in which an error occurs, used to diagnose problems. All text and inputs are masked and images and media are blocked. (Sentry's error monitoring itself is essential — see above.)

C. Marketing (consent required)

These would be used to personalize content and measure marketing campaigns. We do not currently set marketing cookies; if that changes, they will only be set after you consent and this policy will be updated first.

3. Your Choices & How to Control Cookies

Consent banner. When you first visit, our cookie banner lets you "Accept all," "Reject" non-essential cookies, or open "Settings" to choose Analytics and Marketing individually. Non-essential cookies are disabled until you consent, and your choice is saved so we don't ask again. You can reopen the banner at any time using the "Cookie preferences" link in the footer.

Browser controls. Most browsers let you block or delete cookies through their settings. Blocking strictly necessary cookies may cause parts of the service to stop working.

Do Not Track. Because there is no common industry standard for "Do Not Track" signals, we do not currently respond to them; our consent banner is the primary way to control non-essential cookies.

4. Third-Party Cookies

Some cookies are set by the third-party providers we use to operate the service — Stripe (payments and fraud prevention) and Sentry (error monitoring) run as essential; Vercel Web Analytics, PostHog, and Sentry session replay are set only after you consent. Those providers process data under their own privacy terms. The vendors we rely on are listed in our Privacy Policy.

5. Changes to This Policy

We may update this Cookie Policy from time to time. We will post the updated version here and revise the "Last Updated" date above.

6. Contact

Questions about this policy? Contact us at privacy@diveconnect.ai.