Cookie Policy

Who We Are and What This Policy Covers

This Cookie Policy explains how Catch Dev, Inc. ("Catch", "we", "us"), a Delaware (USA) corporation, uses cookies and similar technologies on the catch.dev website and the Catch dashboard. Catch is an error-tracking and in-app user-feedback service for software teams.

This policy covers cookies set when you visit catch.dev or sign in to the Catch dashboard. It does not cover the data our SDKs collect inside our customers' own applications — that is described in our Privacy Policy and in Section 10 below.

What Are Cookies?

Cookies are small text files that a website stores on your device when you visit it. They let the site remember things about your visit, such as the fact that you are signed in, so you don't have to repeat steps on every page. Similar technologies (such as local storage) can serve the same purposes; we use the word "cookies" in this policy to cover them as well.

Types of Cookies at a Glance

Two distinctions are useful when reading the lists below:

• First-party vs. third-party: first-party cookies are set on the catch.dev domain; third-party cookies are set on another company's domain. All of the cookies we use are set on our own domain — including the Mixpanel analytics cookies, which are placed by Mixpanel's library running on our pages and report usage data to Mixpanel, our service provider (see Section 8).
• Session vs. persistent: session cookies are deleted when you close your browser; persistent cookies remain on your device for a set period or until you delete them.

How We Use Cookies

We keep our use of cookies deliberately small. We use them to:

• Keep you signed in securely. Catch uses passwordless email magic links and optional Google sign-in, and an authentication cookie is what keeps you signed in afterwards.
• Complete specific flows, such as carrying a pending team invitation through the signup process.
• Understand, in aggregate, how the website and dashboard are used so we can improve them — only on deployments where analytics is enabled.

We do not use cookies for advertising of any kind. See Section 9.

Strictly Necessary Cookies

These cookies are essential — the dashboard cannot work without them. They do not require consent under most cookie laws because the service you are asking for (signing in and staying signed in) is impossible without them.

• Authentication cookies beginning with tc. (for example tc.session_token and tc.session_data) — set by our authentication system (better-auth) when you sign in via a magic link or Google. They identify your sign-in session and protect it against misuse. Duration: persistent; your sign-in session lasts up to 30 days (refreshed while you remain active) and the cookie expires with it or when you sign out. A short-lived companion cookie caches session data for a few minutes.

If you block these cookies, you will not be able to sign in to or use the Catch dashboard.

Functional Cookies

These cookies support specific features you have asked for. We use one:

• tc_invite — when you follow a team invitation link, this cookie briefly records the pending invite token during the signup flow. Duration: short-lived; it is only relevant while you complete signup.

Invitation links also carry the invite token in the link itself, so blocking this cookie does not normally prevent an invitation from completing; the rest of the service works without it.

Analytics Cookies

Where analytics is enabled on the deployment you are using, we use Mixpanel to understand product usage — for example, which pages and features are used — so we can improve Catch.

• Mixpanel cookies (names beginning with mp_) — set by the Mixpanel browser library to recognize a returning browser and associate usage events with it. Duration: persistent; they remain until they expire or you delete them.

These cookies are not essential. If they are blocked or deleted, the website and dashboard continue to work normally. They are set only when analytics is enabled on the deployment.

Third-Party Cookies

The only other company whose technology sets cookies on our website or dashboard is Mixpanel, our product-analytics provider (Section 7). Mixpanel's library sets its cookies on our own domain, and the usage data they help collect is reported to Mixpanel, which processes it on our behalf as a service provider. We do not allow any advertising networks, social-media pixels, or other third-party trackers to set cookies on catch.dev.

What We Do Not Use Cookies For

• We do not use advertising or targeting cookies, and we do not show third-party ads.
• We do not sell personal information, and we do not share it for cross-context behavioral advertising.
• We do not use cookies to track you across other companies' websites.

Cookies and Apps That Embed Catch SDKs

Our customers embed Catch SDKs (JavaScript, iOS, Android, and the web feedback widget) in their own Apps to collect error events and user feedback. When that happens, Catch processes the resulting data on the customer's behalf, and the customer — not Catch — decides what is collected and is responsible for its own privacy and cookie disclosures to its end users.

The cookies listed in this policy are the ones used on catch.dev and the Catch dashboard. If you have questions about cookies or data collection in an App that uses Catch, please contact the company that operates that App. How Catch processes SDK-collected data is described in our Privacy Policy.

How to Control or Delete Cookies

All major browsers let you view, block, and delete cookies, either for all sites or for specific sites such as catch.dev. Look for the cookie or site-data controls in your browser's privacy or security settings. General guidance for most browsers is available at allaboutcookies.org.

• Blocking strictly necessary cookies (the tc. authentication cookies) will prevent you from signing in to the Catch dashboard.
• Blocking the tc_invite cookie does not normally stop a team invitation from completing, because the invitation link itself carries the invite token.
• Blocking or deleting Mixpanel (mp_*) cookies has no effect on functionality — the site and dashboard work normally without them.

Deleting cookies will sign you out of the dashboard; you can sign back in at any time with a new magic link or via Google.

Your Rights

Depending on where you live, you may have legal rights regarding cookies and the personal data they involve — for example, rights of access, deletion, and objection under laws such as the GDPR or the CCPA. These rights apply regardless of how a cookie was set, and nothing in this policy limits them. Our Privacy Policy explains how to exercise them and how we handle personal data more broadly. Catch is a business-to-business service and is not directed to children under 16.

Changes to This Policy

We may update this Cookie Policy from time to time — for example, if we add, remove, or rename a cookie. When we do, we will post the updated policy on this page and revise the "Last updated" date above. If a change is material, we will take reasonable steps to bring it to your attention, such as a notice in the dashboard or an email to account holders.

Contact Us

If you have questions about this Cookie Policy or our use of cookies, contact us at support@catch.dev. For general inquiries, you can also reach us at hello@catch.dev.