Cookie Policy

localStorage — Authentication token

After you log in, your JWT authentication token is stored in localStorage under the key auth_token. This is essential for keeping you signed in between page loads. It is cleared when you log out or clear your browser storage.

sessionStorage — Active workspace

Your currently selected company and domain IDs are stored in sessionStorage. This data persists only for the duration of your browser session and is cleared automatically when you close the tab.

Third-party cookies — Google OAuth

If you choose to sign in with Google, the Google OAuth flow sets cookies managed by Google LLC. These are governed by Google's Privacy Policy. We do not control these cookies.

localStorage — Cookie consent preference

Your choice in the cookie consent banner (accept all, necessary only, or a custom selection) is stored in localStorage under the key cookie_consent_v2 so we don't ask again on every visit. This is not a cookie — nothing is sent to a server when it is set. You can change your choice at any time via the Cookie Settings link in the footer.

Google Tag Manager — Usage analytics (optional, consent-based)

If you accept analytics in the cookie consent banner, we use Google Tag Manager to load analytics tags — currently Google Analytics — to understand how visitors use our marketing website (e.g. page views, referral source, approximate location). These tags only run and set cookies (such as _ga) on your device after you consent, and stop the moment you withdraw consent via Cookie Settings in the footer. See Google's Privacy Policy for how Google processes this data.

localStorage — Performance monitoring (optional, consent-based)

If you accept performance monitoring in the cookie consent banner, we collect aggregate, non-identifying data about page load times, API response times, and client-side errors to find and fix bugs and slow pages. Events never include free-text error messages, page content, or anything that could identify you — only normalised page routes, numeric durations, and status codes. This data is never combined with analytics or shared with third parties. A randomly generated session identifier and a short-lived signing token are stored in localStorage (under metrics_token) to attribute events to one browsing session without using cookies; both are cleared immediately if you withdraw consent. You can change your choice at any time via the Cookie Settings link in the footer.