Cookie Policy

For the apps.edendigital.io website

Last updated: 19 May 2026

Why we built it this way

Most websites you visit ask for cookie consent because they need to — their growth stack is built on advertising pixels, retargeting scripts, cross-site analytics, and behavioural profiling. The banner is a tax they pay for choosing that stack.

We chose a different stack. No Google Ads pixel. No Facebook Pixel. No LinkedIn Insight Tag. No Twitter Advertising. No PostHog or Segment product analytics. No retargeting, no lookalike audiences, no cross-site fingerprinting. We don’t use any of these tools, so there’s nothing to ask consent for — not as a clever loophole, but because we genuinely believe surveillance-marketing is the wrong way to build a relationship with someone considering paying us for a tool that respects their privacy.

The way we build the product (your audio never leaves your Mac) and the way we build the marketing (no surveillance, no profiling, no consent fatigue) are the same principle — applied at two layers. If we ran a tracker-heavy site to sell a privacy-first app, we’d be living the contradiction. So we don’t.

Aggressive tracker-based marketing isn’t inherently bad — for some product economics (B2B SaaS with high lifetime value, repeat consumer subscriptions, large-volume e-commerce) it works. It just isn’t the model we want to build on. We’d rather grow through good work, honest content, word-of-mouth from people who actually use the product, and the occasional thoughtful press placement — not by chasing you around the internet with retargeting ads after you closed the tab.

Why there’s no cookie banner

UK and EU law (UK GDPR + PECR) require a consent banner when a website sets non-essential cookies or loads third-party tracking on page load, before the visitor has agreed. The whole point of a banner is to ask for that consent up-front.

We’ve built this site so nothing requiring consent fires on page load:

• Our analytics tools (Umami and Vercel Speed Insights) are cookieless by design.
• YouTube videos use a click-to-play pattern. The video player — and any YouTube cookies — only load when you click the play button. We also use YouTube’s privacy-enhanced domain (youtube-nocookie.com) to minimise what they can collect even then.
• The Paddle checkout only loads when you click a “Buy” button. Until that moment, no payment-processor scripts have set any cookies.

Under both UK ICO guidance and GDPR Recital 32, an explicit user action — clicking play, clicking buy — counts as a freely given, specific, informed indication of consent for the thing that action triggers. So we don’t need a banner asking you in advance for permission to do something we’re only going to do when you ask us to.

This isn’t a loophole. It’s the recommended pattern for privacy-respecting websites and the reason tools like youtube-nocookie.com exist in the first place.

What cookies are

Cookies are small files a website saves on your device to remember information — like a preference you chose or that you’re logged in. Similar technologies (localStorage, sessionStorage, pixel tags) work the same way for the purposes of this policy.

The full breakdown

On every page (no consent needed)

Umami analytics. Cookieless. Records anonymous page views and approximate country. No personal data, no cross-site tracking, no cookies. See Umami’s privacy notice.

Vercel Speed Insights. Measures real-user page load performance using anonymous, aggregated metrics. No cookies.

Only after you click play (YouTube)

Each video page shows a thumbnail and a play button. The actual YouTube player only loads if you click play. From that moment, YouTube (Google LLC, Ireland) may set its own cookies for video playback and analytics. We use the privacy-enhanced youtube-nocookie.com domain to minimise this. See Google’s privacy policy.

Only after you click buy (Paddle)

Paddle is our merchant of record. When you click a Buy button, the Paddle checkout opens and Paddle may set cookies on its own domain to process your payment securely. We never see your card details. See Paddle’s cookie notice and privacy policy.

What we don’t use

• No advertising or marketing cookies.
• No Google Analytics, Meta Pixel, or any other cross-site tracker.
• No retargeting or behavioural profiling.
• No social-media tracking embeds.
• No session replay or heatmap tools.

Browser controls

You can clear cookies and site data at any time using your browser’s privacy controls (Safari → Settings → Privacy, Chrome → Settings → Privacy and security, etc.). Browser-level “Do Not Track” and Global Privacy Control (GPC) signals are respected by the tools we use.

If this ever changes

If we ever add anything that sets cookies on page load — for example, a tool that requires it — we’ll add a proper consent banner at the same time, and we’ll update this page to explain it. Until then, this page describes the full picture.

Questions?

Email [email protected].