Privacy Policy

This page describes the information Pokkto collects when you use this site, and what it is used for.

What we collect

When you place an order, we collect your email address and shipping address to process and deliver it. Payment is handled by Stripe, our payment processor; we never see or store your full card details.

If you join a product waitlist, we collect the email address you provide so we can let you know when the product is available.

Cookies

This site sets a small number of first-party cookies needed to serve the store: brand_pk and brand_slug identify which storefront to show on this domain, and ab_pv remembers which page variation you were shown so it stays consistent between visits.

While a page test is running, __Host-brain-exp keeps you on the same version of that page for up to 30 days; it identifies a browser, not a person. Other cookies beginning with __Host-brain- are set only to confirm your own cart and order pages, or for measurement you have allowed. Your answer to the cookie prompt, and any Do Not Sell or Share opt-out, is kept in your browser's local storage so we do not ask again. Outside the regions where everything waits for your Yes (see below), brain_privacy_regime records which rule applies where you are; it identifies a region, not you.

Analytics, session replay and ad measurement

We use PostHog to record page views, clicks, scrolling and session replays so we can understand how this site is used and improve it. Form contents are masked, and checkout, cart and account pages are never recorded. In the United States it runs unless you opt out: choose Opt out on the cookie notice or under "Cookie settings" at the bottom of the page, and nothing more is sent to PostHog. If your browser sends a Global Privacy Control signal, or you are anywhere else, it runs only if you choose Yes on the "Allow cookies?" prompt; before you choose, or if you choose No, nothing is sent to PostHog. You can change your answer at any time from "Cookie settings" at the bottom of the page.

We use the Meta Pixel, a tool from Meta Platforms, to measure how our ads on Facebook and Instagram perform. It records page views and shopping steps such as adding to your bag, starting checkout and completing an order, and may set Meta's cookies (such as _fbp). In the European Union, the European Economic Area, the United Kingdom, Switzerland and Quebec, it runs only if you choose Yes on the "Allow cookies?" prompt; before you choose, or if you choose No, the Meta Pixel is not loaded and nothing is sent to Meta. Everywhere else it runs unless you opt out: choose No or Opt out on the prompt, use the "Do Not Sell or Share My Personal Information" page, or turn on Global Privacy Control in your browser, and nothing more is sent to Meta.

When you join a waitlist where the Meta Pixel runs for you, we also send Meta that sign-up through Meta's Conversions API so it can be matched to the ad you came from. It carries a one-way hashed (SHA-256) copy of your email address, your IP address and browser type, and Meta's own cookie values; we never send your email address in readable form, your name or other contact details. We use it only for ad measurement. Meta's own use of this information is subject to Meta's data policy: https://www.facebook.com/privacy/policy/.

Separately, we record anonymous page-impression events to understand which page variations perform better. These events are not tied to your identity and we do not build cross-site tracking profiles.