Cookie Policy
Effective date: September 25, 2026
1. What cookies are
Cookies are small text files that a website stores on your device. We and our service providers use cookies and similar technologies (such as localStorage and authentication tokens) to operate Lead Friendly.
2. The cookies we use
We use three kinds: necessary cookies that run the site and the app, first-party attribution cookies that remember how you first found us, and PostHog analytics cookies, which are set only if you click “Accept” on our cookie banner. We don’t use advertising cookies or cross-site tracking cookies.
Necessary
Always on: the site and the app don’t work without them.
| Name | What it does |
|---|---|
| sb-* | Keeps you signed in (Supabase authentication). |
| lf_active_org | Remembers which of your organizations you are working in. |
| lf_pending_signup_consent | Carries the terms you agreed to through a Google sign-up. Deleted once the account is created, and never kept longer than 20 minutes. |
| lf_oauth_state_*, lf_oauth_return_google, lf_connect_state | Security check while you connect a calendar, email, CRM, Google or Stripe account. Lasts 10 minutes. |
| lf_first_call | Remembers that you finished the first-call setup screen. |
| lf_skip_welcome | Remembers that you chose to skip the setup wizard, until you close the browser. |
| __t_brand_preview | Agency-admin brand preview toggle. |
| __t_impersonation | Agency-admin sub-account impersonation session. |
| lf_support_pass | Lets our support staff into your account during a support session you approved. Lasts up to 4 hours. |
| __stripe_mid, __stripe_sid | Set by Stripe, our payment processor, when you pay by card in the app, to detect payment fraud. |
| lf_dealer_lang | Remembers the language you picked on a dealership website we host. |
| lf_gpc | Records that your browser sent a Global Privacy Control signal, so analytics stay off. |
| __t_cookie_consent, __t_cookie_consent_v | Your answer to the cookie banner, and which version of the banner you answered. Kept in local storage, not a cookie. |
Attribution (first-party)
Set on your first visit whether or not you accept analytics, and read only by our own site. When you request a demo, book one or create an account, we save the source they recorded with it, so we can tell which channels and partners bring us customers.
| Name | What it does |
|---|---|
| lf_utm | How you first reached us: the campaign tags in the link (such as utm_source), the referring website, the page you landed on and when. Lasts one year. |
| lf_ref | A partner's referral code, if the link that brought you carried one, so the partner is credited if you sign up. Lasts one year. |
Analytics (only if you accept)
PostHog shows us how the site is used: which pages are visited, how visitors move between them, and how fast pages load. It may also record a small sample of visits as replays, showing the page as you saw it along with your clicks and scrolling, with anything typed into form fields masked. None of this starts until you accept, and none of it starts if your browser sends a Global Privacy Control signal, even if you accepted.
| Name | What it does |
|---|---|
| ph_*_posthog | PostHog analytics: an ID for your browser so visits can be counted and connected. PostHog also keeps related data in local and session storage. Lasts one year. |
| lf_landed | Remembers that PostHog already recorded your first visit, so it is recorded once. Lasts one year. |
Counting visits without cookies
Whatever you choose, we count page views on our marketing site without cookies: the page, the referring website’s domain, any campaign tags in the link, and your country. On our free tools we also count that a tool was used, never what you enter, and we count demo requests, demo bookings and demo calls with the source your first visit came from. These counts store no identifier, no IP address and no browser details, so they can’t be linked to you or to your other visits.
3. Changing your choice
You can change your answer to the cookie banner at any time. If you withdraw an earlier “Accept”, we delete the PostHog cookies and storage from this browser and ask you again.
You can also clear or block cookies in your browser settings. Blocking necessary cookies will stop you from signing in. If we start using a new kind of cookie that “Accept” would cover, we will update this policy and the cookie banner will ask you again.
4. Changes
We will update this policy if we change which cookies we use. The updated effective date will appear above.
5. Contact
Questions: hello@leadfriendly.com.