Cookie posture
Version 2 · Effective 2026-10-01
Our posture
We hold ourselves to the standard we help our customers meet. We use only what the service needs to work. Our analytics are cookieless. We do not use Google Analytics, advertising cookies or cross-site tracking, and nothing inside the signed-in platform is sent to an analytics or advertising service that identifies you.
Cookies and browser storage we use
Strictly necessary — always on
| Name | Type | Where | What it does | How long |
|---|---|---|---|---|
Sign-in session (sb-…-auth-token) | Browser local storage | Signed-in platform | Keeps you signed in and lets the platform identify your account securely | Until you sign out (the access token refreshes about hourly) |
trident.signup | Browser session storage | Sign-up | Remembers your progress through the sign-up steps | Until you close the browser tab |
| Bot-protection check | Set by Cloudflare Turnstile | Our forms | Confirms a form is being submitted by a person | For the check only |
Preferences — remember how you like the platform
| Name | Type | What it does | How long |
|---|---|---|---|
sidebar_state | First-party cookie | Remembers whether you keep the sidebar open or closed | 7 days |
| Navigation and view settings | Browser local storage | Remembers collapsed menu groups and table or card views | Until you clear them |
Preference items contain no personal information beyond an internal account identifier and are never used to track you.
Analytics (cookieless)
| Service | Cookies? | Where | What it does |
|---|---|---|---|
| Plausible | None (cookieless) | Public pages | Counts visits, pages viewed and how visitors reach our pricing pages, without identifying you |
| Vercel Analytics | None (cookieless) | Public pages and platform | Measures page performance and page views without identifying you |
Third-party content
If you open our demo-booking calendar (Cal.com), that service may set its own cookies inside the calendar window, under its own privacy notice. Our pages load fonts from Google Fonts; that request shares your IP address with Google but sets no cookie.
What we never do
- We set no advertising cookies and do not sell or share your browsing data.
- We do not use cookies to profile you across other websites.
- We do not use Google Analytics or any similar tracking tag.
- If we ever add a cookie that is not strictly necessary, we will ask for your opt-in first (clear, specific, unbundled and as easy to withdraw as to give), and update this posture before we do.
Your choices
- Signing out removes your sign-in session from the browser.
- You can clear cookies and local storage in your browser settings. Clearing strictly necessary items will sign you out.
- Because nothing optional is set, there is nothing to opt out of; if that changes we will add a "Cookie settings" control first.
Why this is lawful
Strictly necessary storage is used because the service cannot work without it. Where consent is needed it must be freely given, specific, informed and unambiguous, given by a clear opt-in, and as easy to withdraw as to give (Cyber and Data Protection Act [Chapter 12:07] section 10 and the Authority's Guideline CDPG 4 of 2024). See our Privacy Notice for how we use personal information generally.
Contact
Questions about this posture: dposervices@assegai.africa.
Questions? Email dposervices@assegai.africa.