Cookie Policy

We use a small number of cookies, all of them functional. We don't run advertising cookies and we don't sell or share what we collect.

Cookies on this website

Session cookie

Keeps you signed in and maintains your session while you use the application. Necessary — the service can't work without it. Expires when your session ends.

XSRF-TOKEN

A security cookie that protects forms against cross-site request forgery. Necessary. Expires with your session.

onpageiq_audience

Set when you visit one of our audience pages — for example /for-agencies — so that the home page can show you the version most relevant to you on a later visit. Functional. Lasts 30 days, and holds only a short label such as agency or developer. It contains no personal information and no identifier for you. Clearing your cookies removes it, and the site works normally without it.

Theme preference

Your light or dark mode choice is stored in your browser's local storage rather than in a cookie. It never leaves your device.

Inside the application

When you're signed in, we may record session activity for diagnostics — reproducing a bug is much faster with a replay than with a description. This is not enabled on the public website, only within the signed-in application, and only in environments where we've explicitly turned it on. If you'd like to know whether it's active for your organization, ask us and we'll tell you.

Managing cookies

Every browser lets you view and delete cookies, and block them for individual sites. Blocking the necessary cookies above will stop you being able to sign in; blocking onpageiq_audience only means the home page won't personalize itself.

Changes to this policy

If we add or remove a cookie, we update this page in the same change. See also our privacy policy and our security page.