Cookie & Diagnostic Telemetry Policy
Last Updated: October 13, 2026 • Effective Immediately
Your Current Consent Preference
Current Status: Undecided (Pending User Selection)
1. Overview & Prior Express Consent Architecture
Propsly™ operates under a strict Prior Express Consent framework. When you visit our website (propsly.co), no performance telemetry, session recording scripts, or analytical tracking tools are initiated on page load unless and until you provide affirmative consent through our interactive consent controls.
If you reject non-essential cookies or dismiss the prompt without affirmative opt-in, only strictly necessary cookies required to render the application and protect your account session will operate.
2. Categories of Cookies & Telemetry Deployed
A. Strictly Necessary Cookies (Always Active)
These first-party identifiers are technically essential for platform operation, account security, and session state. They cannot be deactivated without rendering core services inoperable.
- Session Authentication: Cryptographically signed first-party session tokens preserving your authenticated login state and role permissions.
- Security & CSRF Defense: Anti-forgery tokens preventing unauthorized cross-site request attacks against your account.
- Consent Preference Storage: A first-party cookie (
propsly_consent) recording whether you accepted or declined optional diagnostics, ensuring your choices are honored across visits.
B. Performance Diagnostics & Usability Replay (Gated by Prior Express Consent)
Subject to your affirmative prior opt-in, we deploy website performance diagnostic tools and session replay technologies operated by trusted diagnostic telemetry providers acting solely on our behalf under confidential service provider contracts.
- Navigational Metrics: Clicks, page scrolling, mouse movements, window dimensions, and technical error logs.
- Operational Purpose: Identifying user friction points, measuring mobile photo capture success rates, detecting JavaScript rendering errors, and optimizing report workflow usability.
3. Client-Side Sensitive Data Masking Safeguards
Even when diagnostic telemetry is activated by your affirmative consent, Propsly™ enforces multi-tier client-side data masking at the web browser level prior to any transmission.
- Payment & Financial Credentials: Credit card numbers, expiration dates, security codes, and bank details are processed via secure iframe tokenization and are strictly excluded and masked from diagnostic session captures.
- Account Credentials & Passwords: Password inputs and authentication tokens are masked client-side and never recorded.
- Personal & Access Data: Phone numbers, tenant contact information, gate codes, lockbox combinations, and private messages are tagged with client-side masking attributes (
data-mask="true") preventing sensitive data capture.
4. California Privacy Rights & Safe Harbor Disclosures
A. California Invasion of Privacy Act (CIPA, Cal. Penal Code §§ 631 & 638.51)
Notice is hereby given under California Penal Code §§ 631 and 638.51 that web server logs, security telemetry, and consented diagnostic tools are deployed solely for legitimate internal security, fraud detection, and technical maintenance under confidential service provider agreements.
Telemetry tools record standard website interactions and technical telemetry strictly to ensure platform reliability. They do not intercept private oral or written personal communications. Site access, continued navigation, and affirmative cookie consent constitute prior express written consent to these standard diagnostic measures.
B. California Consumer Privacy Act & CPRA Affirmations
We do not sell personal information, nor do we share personal information for cross-context behavioral advertising. Diagnostic data collected with your consent is never monetized or distributed to data brokers.
5. Managing Preferences & Browser Controls
You can modify your consent settings at any time using the interactive control box at the top of this page or by configuring your web browser settings. Most modern browsers allow you to:
- View and delete cookies stored on your device on a per-domain basis.
- Block third-party cookies or all cookies by default.
- Send Global Privacy Control (GPC) or Do Not Track (DNT) signals.
6. Contact Us
For questions regarding our cookie practices, technical telemetry, or data governance policies, please contact our privacy compliance team at:
Email: privacy@propsly.co
Legal Notices: legal@propsly.co