Website Privacy & Cookie Policy
Effective date and last updated: October 5, 2026.
This policy covers the ShakeMatch website at shakematch.app. The mobile application's practices are described separately in the mobile app privacy policy.
1. Who is responsible
The website is operated by Aziz Habibi, Yusuf Onaran, and Eray Turan, who are responsible for the website processing described here. Contact us at support@shakematch.app with privacy questions or requests.
2. What this website processes
This is an informational landing page. It does not offer registration, user accounts, newsletter subscriptions, or forms to collect your email address. It does not access your phone contacts or mobile app history.
When you permit analytics, Google Analytics processes information about visits and interactions, including pages viewed, referrers, campaign source, medium and campaign name, browser and device characteristics, approximate location, timestamps, engagement, and cookie or installation identifiers. These identifiers can distinguish visits and devices; we do not describe this processing as completely anonymous.
We use this information to understand website traffic and assess marketing campaign performance. We do not enable personalized advertising or Google Signals in our website integration, and we do not intentionally send names, email addresses, or phone numbers to Analytics.
3. Optional analytics and consent
We use Google Analytics through the Firebase JavaScript SDK only after you accept analytics. Before acceptance, or when you reject, the website does not load Google Analytics or send analytics events. The legal basis for this optional processing is your consent.
You can reject analytics without losing access to the website. You can change your choice or withdraw permission at any time using Cookie preferences in the footer or the control below. Withdrawal stops future analytics collection and removes accessible first-party Analytics cookies. If Analytics has already loaded, the page reloads to unload it. Withdrawal does not retrospectively invalidate earlier processing or automatically delete information already sent to Google.
4. Cookies and browser storage
| Name | Purpose / provider | Duration |
|---|---|---|
| shakematch.cookie-consent | First-party local storage: records acceptance or rejection, time, expiry, and notice version. Necessary to remember your privacy choice. | Valid for 180 days; replaced on your next choice. An expired record may remain in browser storage until your next visit or manual removal. |
| _ga | Google Analytics first-party cookie: distinguishes users. Optional. | Configured for up to 180 days, without renewal on each visit. |
| _ga_<identifier> | Google Analytics first-party cookie: maintains session information. Optional. | Configured for up to 180 days, without renewal on each visit. |
| firebase-installations-database | Firebase SDK IndexedDB storage: installation identifier and related SDK state, created after analytics permission where supported. | Managed by the SDK; may remain until you clear website data. It does not authorize analytics after withdrawal. |
Your browser may apply shorter storage limits. You can clear cookies and website storage in your browser settings; clearing the saved privacy choice means we will ask again. Read Google's information about Analytics cookies.
5. Providers, hosting, and international transfers
Google receives the analytics information collected after consent. Its processing is subject to applicable service and data processing terms. Read the Google Privacy Policy and Firebase privacy information.
The website is intended to be hosted on Vercel. The hosting provider may process IP addresses, requested URLs, request times, browser information, and technical logs to deliver the website, maintain security, and investigate failures. This processing is separate from optional analytics and is based on our legitimate interests in operating and protecting the website. See Vercel's Privacy Policy.
These providers may process information outside your country, including outside the European Economic Area or the United Kingdom. Where required, transfers must be covered by an applicable adequacy decision or appropriate safeguards, such as standard contractual clauses. You may contact us for information about the arrangements applicable to your data.
6. Retention
Our intended GA4 configuration is 14 months for user-level and event-level data covered by its retention controls, with retention reset on new activity disabled. This is configured in the Analytics account, separately from browser cookie duration. Standard aggregated reports are not subject to that same retention setting, and Google's deletion runs on its processing schedule. See Google's retention documentation.
Hosting logs are retained according to the hosting service's configuration and the operational or security purpose concerned. If you email support, we process your address and the information you send to respond; correspondence is retained for as long as necessary for your request and applicable legal obligations.
7. Your rights
Depending on applicable law, you may have rights to access, correct, delete, restrict, or obtain a portable copy of personal information, to object to processing, and to withdraw consent. You may also complain to a competent supervisory authority. Send requests to support@shakematch.app. We respond within applicable legal deadlines and may ask for proportionate information to verify the request.
There is no website account linking analytics records to your identity. We may need additional information to locate an identifier-based record. Please do not send unnecessary personal information. Changing browser preferences stops future analytics; requests concerning already collected data are handled separately.
8. Changes
We update this policy when website features, providers, or processing purposes change. Material changes to optional analytics purposes require renewed consent. The date above identifies this policy version.
