Cookie Policy

Effective: September 22, 2026

This Cookie Policy explains how VisionCore LLC (“VisionCore,” “we,” or “us”) uses cookies and similar technologies (such as browser local storage) on dealbasis.app (the marketing site) and console.dealbasis.app (the app, together the “Service”). It supplements our Privacy Policy, which governs how we handle the information these technologies collect.

1. What Cookies Are

Cookies are small text files a site stores in your browser to remember information between visits or requests. We also use browser local storage for some of the same purposes; the rest of this policy uses “cookies” to cover both unless otherwise noted.

2. Cookies We Use

Strictly Necessary

Required for the Service to function - you cannot opt out of these without losing access to your account.

  • Authentication (Supabase): keeps you signed in and identifies your workspace. Stored in browser local storage rather than a traditional cookie.
  • Bot protection (Cloudflare Turnstile): on the sign-in and sign-up pages only, a Cloudflare challenge checks that the visitor is a person before an account action is accepted. Cloudflare processes technical signals from your browser for this check.

Advertising / Conversion Measurement

We run ad campaigns on Google Ads and OpenAI/ChatGPT. Both platforms' own tags measure whether a visit from one of those ads led to a signup - Google Ads' on dealbasis.app and console.dealbasis.app, OpenAI's ads pixel on dealbasis.app only. This is conversion measurement only: we have not enabled audience remarketing, ad personalization, or cross-site retargeting through either tag, and we do not use them to build advertising profiles of visitors.

Google Ads runs in Google's Consent Mode: its tag loads on every page on both sites so it can respect your choice the moment you make it, but until you accept the cookie banner it runs in a restricted, cookieless mode that cannot set or read the advertising cookie below or send data usable for ad measurement. The OpenAI/ ChatGPT ads pixel has no equivalent restricted mode, so it does not load at all until you accept.

  • Google Ads (gtag.js) - dealbasis.app and console.dealbasis.app: once accepted, sets _gcl_au (first-party, ~90 days), which Google uses to correlate an ad click with a later conversion (account signup) on this domain. On a signup, we also pass Google your email address so it can match the conversion when its own click-tracking cookie didn't survive (e.g. Safari's or Firefox's cookie limits) - Google hashes it before using it for matching and does not receive it in plain text from us in a form it stores as-is; see Google's documentation on Enhanced Conversions for how it handles this.
  • OpenAI/ChatGPT ads pixel (oaiq) - dealbasis.app only: a conversion-measurement script from OpenAI that reports page views and signups back to OpenAI so we can measure ChatGPT ad performance. We do not control what OpenAI stores in your browser to do this; see OpenAI's own privacy policy for how it handles data it receives this way.
  • pinned_attribution (first-party local storage, up to 90 days): records which page and campaign a signup came from, on our own servers, not shared with Google or OpenAI. See our Privacy Policy, Section 1 (“Usage & Operational Data”).

We do not run Google Analytics (GA4), Meta Pixel, or any other analytics or advertising network on the Service beyond the tags named above.

Error Monitoring

Sentry records crashes and errors so we can fix them. It includes a session replay, which captures the shape of an interaction leading up to a problem - which elements were clicked, in what order. It runs with all text masked and all media blocked, so the deal figures, addresses, notes, and photos on your screen are not captured. This is diagnostic only: it is never used for advertising, profiling, or measuring engagement.

We Do Not Use

Third-party behavioral advertising cookies, cross-site tracking pixels, or heatmap and engagement-analytics tools. We do not sell or share cookie data with data brokers.

3. Your Choices

  • Cookie banner: on your first visit to either site, a banner lets you accept or decline the advertising cookies above. Your choice is stored in a cookie_consent cookie scoped to dealbasis.app, so accepting or declining on one site is honored on the other without asking again - declining doesn't affect anything else about your account or the Service.
  • Browser controls: most browsers let you block or delete cookies in settings. Blocking the strictly necessary authentication storage will prevent you from staying signed in.
  • Google Ads settings: manage how Google uses advertising cookies at adssettings.google.com.
  • OpenAI: we don't control OpenAI's own opt-out mechanism for its ads pixel; email us and we can point you to it, or block the script directly with your browser's content-blocking settings.
  • Do Not Track: because we don't use cross-site behavioral advertising, there is no tracking to disable, and the Service does not respond differently to browser “Do Not Track” signals - consistent with our Privacy Policy.

4. Changes to This Policy

If the cookies or tags we use change - for example, if we add a new analytics or advertising tool - we will update this page and, for material changes, the “Effective” date above.

5. Contact

VisionCore LLC — New York
visioncorehq@gmail.com