Cookie Policy

Strictly necessary cookies

We set a small number of cookies that the platform cannot operate without. These are exempt from consent because they deliver a service you requested.

• Session cookie: keeps you signed in, bound to a revocable server-side session, and expires after a bounded lifetime.
• Security token cookie: protects authentication requests against cross-site request forgery.
• Consent cookie: remembers your analytics choice so we do not ask again on every visit.

Cookie properties

• Marked HttpOnly so page scripts cannot read them.
• Marked Secure so they are only sent over HTTPS.
• Marked SameSite so they are not sent with cross-site requests.

Analytics and advertising

We do not set advertising cookies and we do not share any data with advertising networks.

We collect product analytics only after you choose to allow them. If you decline, no analytics are recorded for your visit at all.

• Analytics events are pseudonymous: your account identifier is replaced with a keyed hash before storage.
• Only approved, non-identifying descriptors are permitted, such as work mode or category. Requests carrying anything else are rejected.
• Page paths are normalised so record identifiers never become analytics dimensions.
• Automated and crawler traffic is excluded.
• Analytics events are deleted on a rolling retention schedule.

Managing cookies

You can clear or block cookies in your browser settings. Blocking strictly necessary cookies will prevent you from signing in.

Signing out, or revoking a device from your security settings, invalidates the associated session immediately.