Cookie Policy

Last updated: November 7, 2026 Here is what cookies and similar storage we use on our website and platform, what each one does, and how to turn off anything that is not required. We keep tracking to an absolute minimum and never ever use it for advertising.

1. What Are Cookies?

Cookies are small text files that a website places on your device when you visit it. Local storage and session storage are similar mechanisms used by modern browsers. We use the term "cookies" in this policy to refer to all of these technologies for simplicity.

Strictly Necessary Cookies

These cookies are essential for the platform to function and cannot be turned off. They are set in response to actions you take, such as signing in, setting your privacy preferences, or filling in forms. You can configure your browser to block them, but parts of the platform will not work.

• Authentication cookies: Sign-in session, JWT tokens, CSRF protection, multi-tenant routing. Set by Sistava. First-party. Session-based or up to 30 days.
• Security cookies: Fraud prevention, rate limiting, bot detection. Set by Sistava and Cloudflare. Session-based or up to 30 days.
• UI preferences: Theme (dark/light), language, sidebar state. Stored in local storage. Persistent until cleared.

Analytics Cookies

With your consent, these cookies help us understand how visitors use the platform so we can improve it. You may decline or withdraw consent at any time using the preferences on this page.

• PostHog: Product analytics, session replay, feature flags. Tracks page visits, clicks, errors, and user-flow events. Cookies and local storage. Up to 365 days. Opt out via the consent banner or by sending us an opt-out request.
• Google Analytics (GA4): Aggregated website analytics (visits, sources, geography, device type). Cookies. Up to 26 months. Opt out via the consent banner, the Google Analytics opt-out browser add-on , or by sending us an opt-out request.
• Partner referral attribution: A first-party Sistava cookie stores a partner or affiliate promo code for 90 days so a visitor who later signs up without a current promo link can be attributed. A current promo link used at signup takes priority. It contains the code only, not a customer identity, and is set only where analytics-cookie consent permits it. See the Affiliate Program Agreement for the referral rules that apply to accepted affiliates.

Functional Cookies

These cookies enable enhanced functionality and personalization. They may be set by us or by third-party providers whose features we have added to the platform.

• Stripe: Set by Stripe when you initiate a payment, to detect fraud and process the transaction securely. Required for payment processing. See Stripe's cookie policy .

Marketing & Advertising Cookies

We do not use third-party advertising or behavioral retargeting cookies. We do not share personal data with advertisers. We do not run ad networks. We do not place pixels for ad platforms (Meta, Google Ads, LinkedIn Ads, TikTok Pixel, etc.).

3. Your Choices

You can control cookies in several ways:

• Optional analytics: Google Analytics and PostHog, including session replay, load only after you select Accept All. Essential Only keeps these providers off. This applies everywhere, including when you sign in. Declining does not prevent you from using the service.
• Internal signed-in activity: Essential Only keeps optional third-party analytics off; it does not disable our own limited pricing/payment-area visit and action records. These identify the authenticated user and workspace so we can support billing journeys, understand repeat interest and improve the product. They use the existing sign-in context, introduce no new tracking cookie or stored visitor identifier, and do not collect payment-field inputs. See our Privacy Policy for access, retention and scope.
• Changing your choice: You may change your preferences on this page at any time. Withdrawing consent stops future Google Analytics and PostHog collection and removes their browser cookies and local storage. It does not delete information already collected. Older saved acceptances may require a fresh choice.
• Browser settings: Most browsers let you block or delete cookies via their settings. Blocking strictly necessary cookies may break sign-in and other features.
• Do Not Track: Some browsers offer a "Do Not Track" signal. Because there is no industry standard for honoring this signal, we currently do not respond to it differently from cookie consent.
• Direct opt-out: Email [email protected] to request opt-out from analytics cookies.

4. Changes to This Policy

We may update this Cookie Policy from time to time as the cookies we use change. The most recent version is always the one published on this page.

5. Contact

Questions about cookies or this policy? Email [email protected] . This page covers cookies specifically. For everything else about how we handle your data, see our Privacy Policy .