Cookie Policy

Last updated: August 13, 2026 Here is what cookies and similar storage we use on our website and platform, what each one does, and how to turn off anything that is not required. We keep tracking to an absolute minimum and never ever use it for advertising.

1. What Are Cookies?

Cookies are small text files that a website places on your device when you visit it. Local storage and session storage are similar mechanisms used by modern browsers. We use the term "cookies" in this policy to refer to all of these technologies for simplicity.

Strictly Necessary Cookies

These cookies are essential for the platform to function and cannot be turned off. They are set in response to actions you take, such as signing in, setting your privacy preferences, or filling in forms. You can configure your browser to block them, but parts of the platform will not work.

• Authentication cookies: Sign-in session, JWT tokens, CSRF protection, multi-tenant routing. Set by Sistava. First-party. Session-based or up to 30 days.
• Security cookies: Fraud prevention, rate limiting, bot detection. Set by Sistava and Cloudflare. Session-based or up to 30 days.
• UI preferences: Theme (dark/light), language, sidebar state. Stored in local storage. Persistent until cleared.

Analytics Cookies

These cookies help us understand how visitors use the platform so we can improve it. They may collect information in an aggregated, anonymized form. You can opt out of analytics cookies through the consent banner or via the opt-out methods listed below.

• PostHog: Product analytics, session replay, feature flags. Tracks page visits, clicks, errors, and user-flow events. Cookies and local storage. Up to 365 days. Opt out via the consent banner or by sending us an opt-out request.
• Google Analytics (GA4): Aggregated website analytics (visits, sources, geography, device type). Cookies. Up to 26 months. Opt out via the consent banner, the Google Analytics opt-out browser add-on , or by sending us an opt-out request.
• Partner referral attribution: A first-party Sistava cookie stores a partner or affiliate promo code for 90 days so a visitor who later signs up can be attributed to the first partner link they used. It contains the code only, not a customer identity, and is set only where analytics-cookie consent permits it. See the Affiliate Program Agreement for the referral rules that apply to accepted affiliates.

Functional Cookies

These cookies enable enhanced functionality and personalization. They may be set by us or by third-party providers whose features we have added to the platform.

• Stripe: Set by Stripe when you initiate a payment, to detect fraud and process the transaction securely. Required for payment processing. See Stripe's cookie policy .

Marketing & Advertising Cookies

We do not use third-party advertising or behavioral retargeting cookies. We do not share personal data with advertisers. We do not run ad networks. We do not place pixels for ad platforms (Meta, Google Ads, LinkedIn Ads, TikTok Pixel, etc.).

3. Your Choices

You can control cookies in several ways:

• Cookie consent banner: If you visit from the EU, UK, or Switzerland and are not signed in, you can accept or reject analytics cookies through the banner. Accepting lets us recognize you across visits. Rejecting keeps your visit anonymous and not linked across sessions, though we still count anonymous page views. Outside those regions, analytics cookies are on by default. You can change your choice at any time by clearing your browser cookies and revisiting the site, or by contacting us.
• Account tracking: Once you sign in, we track usage inside the product itself, such as which features you use and your plan, so we can run, support, and improve the service. This applies regardless of your banner choice, since it takes effect after you are signed in.
• Browser settings: Most browsers let you block or delete cookies via their settings. Blocking strictly necessary cookies may break sign-in and other features.
• Do Not Track: Some browsers offer a "Do Not Track" signal. Because there is no industry standard for honoring this signal, we currently do not respond to it differently from cookie consent.
• Direct opt-out: Email [email protected] to request opt-out from analytics cookies.

4. Changes to This Policy

We may update this Cookie Policy from time to time as the cookies we use change. The most recent version is always the one published on this page.

5. Contact

Questions about cookies or this policy? Email [email protected] . This page covers cookies specifically. For everything else about how we handle your data, see our Privacy Policy .