1. Introduction
This Cookie Policy explains which cookies and similar technologies The Ultimate Profile ("we", "us", or "our") uses on theultimateprofile.com, why, and how you can control them. Our Privacy Policy explains how we process personal data in general.
Service Operator:
Nico Jaroszewski
Schlosstalstrasse 202
8408 Winterthur
Switzerland
Email: [email protected]
2. Cookies and Similar Technologies
Cookies are small text files that a website stores in your browser. Similar technologies, such as local storage and session storage, keep data in your browser in the same way. This policy covers both, and we use the same categories for them.
3. Categories
- Essential: sign-in, security, payments, your privacy choices and access to your free photo. Always on, because the site cannot work without them.
- Site functions: remember settings and unfinished steps in your browser, such as your theme or a draft. Always on; they stay in your browser.
- Experiments: keep the version of a page or offer you see consistent while we test improvements. They are part of Analytics and follow the same consent rules.
- Referral links: give you the sign-up bonus of the partner or invite link you opened, and credit the person who shared it. Essential, because the link you chose cannot work without them.
- Analytics: full analytics with PostHog and Google Analytics. Whether they start before a choice depends on your region, as described in section 4 of our Privacy Policy.
- Marketing: Google advertising storage stays off unless you turn it on; the Google sign-in prompt follows the regional model in section 4.5. We do not use advertising pixels.
4. Cookies We Use
4.1 Essential
- __session, __client_uat (and versions with a suffix), set by Clerk: keep you signed in. __session lasts about one minute and is renewed while you use the site; __client_uat lasts as long as your sign-in, up to one year.
- __client, set by Clerk on clerk.theultimateprofile.com: your sign-in with our login provider, up to one year.
- __stripe_mid, __stripe_sid, set by Stripe on pages with a payment form: fraud prevention. 1 year and 30 minutes.
- up-consent-source, up-analytics-objection, set by us: remember your privacy choice and whether you object to analytics, so our server respects it too. 180 days.
- gpc, up-privacy-signal, set by us: remember that your browser sends Global Privacy Control or Do Not Track. 180 days.
- tup_photo_access, tup_photo_handoff, set by us: let you open and save your free photo securely. 7 days.
4.2 Experiments
- up_xid, set by us: a random ID so you keep seeing the same version during a test. 180 days.
- up_xa, set by us: which test versions you were shown. 180 days.
We set these cookies under the same rules as analytics: in opt-in regions only after you accept analytics, elsewhere by default until you turn Analytics off, and never when your browser sends Global Privacy Control or Do Not Track. Without them you see the standard version. A test can show you different offers, but you always pay the price shown to you.
4.3 Referral Links
- tup_partner, set by us when you open a partner link: credits that partner. 60 days.
- tup_referral, set by us when you open an invite link: credits the friend who invited you. 30 days.
We set these cookies only when you open such a link, because they deliver the bonus you opened it for.
4.4 Analytics
- ph_[project key]_posthog, set by PostHog (EU): recognises your browser across visits for product analytics and masked session replay. 1 year.
- _ga, set by Google Analytics: distinguishes browsers. 2 years.
- _ga_[ID], set by Google Analytics: keeps the state of your visit. 2 years.
These cookies are only set with full analytics. Before that, PostHog runs without cookies, in memory only.
4.5 Marketing
We do not use advertising pixels. If you turn Marketing on, Google Analytics may also use advertising storage under Google Consent Mode, which can set Google advertising cookies such as _gcl_au.
Marketing also covers the "Sign in with Google" prompt (Google One Tap) that we may show signed-out visitors on articles, Hinge prompt pages, tools and guides. In opt-in regions it loads only after you turn Marketing on; elsewhere it loads unless you turn Marketing off, and never with Global Privacy Control or Do Not Track. Google Identity Services may then set the g_state cookie, which remembers whether you closed the prompt. Section 7.3 of our Privacy Policy explains which data Google receives.
5. Browser Storage
We also keep some data in your browser's local storage or session storage:
- Your cookie and privacy choice (cookie-consent)
- Display settings, such as the theme (tup.theme) and the example person you chose for previews
- Unfinished steps, such as your free photo progress or a setup draft, so you can continue
- Banners and offers you dismissed, so we do not show them again
- Whether Google's sign-in prompt was already shown this session, or when you closed it, so it appears at most once per session and not again for 7 days (up-one-tap-session, up-one-tap-v1), and your reading position while you sign in (up-one-tap-scroll)
- A random visitor ID for the free tools and guides (growth-tools-visitor, mrr-guide-visitor), used only for the daily limits
- The test versions you were shown (tup.xp.*), under the same rules as section 4.2
- With full analytics only: the campaign that brought you here, for up to 90 days (tup-attribution-v1), and PostHog data (ph_*)
This data stays in your browser until you clear it. A page sends it to us only when a step needs it, for example the visitor ID with a free-tool request.
6. Third Parties
- Clerk (sign-in): Clerk Privacy Policy
- Stripe (payments): Stripe Privacy Policy
- PostHog (analytics, EU): PostHog Privacy Policy
- Google (Google Analytics, Sign in with Google): Google Privacy Policy, Google Analytics Opt-out
- Cloudflare (delivery and the Turnstile bot check): Cloudflare Privacy Policy. Turnstile runs in a frame on Cloudflare's own domain; we set no cookie for it.
7. Your Choices
- On your first visit, the banner offers Accept All, Necessary only and Customize.
- You can change your choice at any time under Cookie settings on this page or Privacy choices in the footer.
- In opt-in regions, analytics starts only after your consent. Elsewhere it is on by default until you turn Analytics off. Section 4 of our Privacy Policy lists the regions.
- We respect Global Privacy Control and Do Not Track: they stop analytics and experiment cookies, even after an earlier acceptance.
- You can also block or delete cookies in your browser settings. Deleting them signs you out and resets your choices.
8. Retention
Each cookie above lists how long it stays in your browser. How long we keep analytics data is described in sections 4 and 7.2 of our Privacy Policy.
9. International Transfers and Your Rights
Some providers above process data outside Switzerland and the EU, in particular in the United States; section 12 of our Privacy Policy explains the safeguards. Your rights, including withdrawing consent and objecting to analytics, are listed in section 10 of our Privacy Policy.
10. Changes to This Policy
We update this policy when the cookies we use change and show the date of the last update at the top. We announce material changes on the website.
11. Contact Us
For questions about cookies or this policy:
Email: [email protected]
Address: Nico Jaroszewski, Schlosstalstrasse 202, 8408 Winterthur, Switzerland
