Legal

Cookie Policy

Last updated · July 25, 2026

Plain language

We use stratum_refresh to keep you signed in — HttpOnly, SameSite=Lax, scoped to /api/v1/auth, 7 days. With your consent, Google Analytics measures page engagement and signup paths, and Google Ads measures campaign conversions. Advertising personalization remains disabled. Your short-lived access token is not a cookie; the app holds it client-side. No session replay, no social advertising pixels.

What we set

Name	Purpose	Expires	First/Third party
stratum_refresh	Keep you signed in — HttpOnly, SameSite=Lax, path /api/v1/auth	7 days	First
_ga / _ga_*	Measure page engagement and signup paths after you allow analytics	Up to 2 years	Third
_gcl_* / Google Ads storage	Measure ad clicks and purchase conversions for Stratum campaigns	Up to 90 days	Third

What we don't set

×Mixpanel, Amplitude — we do not use either service.
×Facebook Pixel, Twitter Pixel, LinkedIn Insight — no social advertising pixels.
×Hotjar, FullStory, session recording — we don't replay your sessions.
×Third-party ad cookies — we don't serve ads, ever.