Cookie Policy
ePrivacy and GDPR Article 7: consent for non-essential cookies.
Last updated:
We set no analytics, advertising or marketing cookies. Everything listed below is strictly necessary: it either keeps you signed in or records the consent choice you made. Browsing the public site sets nothing at all unless you turn analytics on, and even then nothing is stored in your browser.
Categories of cookies we use
- Strictly necessary / essential: required for sign-in and to record your consent choice. Always on. This is the only category currently in use.
- Functional: none in use. We store no language or region preference.
- Analytics / statistical: Vercel Web Analytics, and it is off until you switch it on. It is cookieless: it stores nothing in your browser and sets no identifier that follows you between visits. It records a page view with the page address, the referring page, your approximate country and your device type. The script and the measurement request are served from this domain, so your browser makes no request to another company; Vercel processes the result as our sub-processor.
- Marketing / advertising: none in use, and none is planned.
The consent controls offer analytics and marketing as separate choices, and both are off until you opt in. Refuse analytics and the measurement code is never loaded at all. No marketing tools are installed.
What we set, and where
The two consent entries are stored in your browser’s local storage rather than in cookies. ePrivacy treats both the same way, so both are listed here, with the storage medium named.
| Name | Category and storage | Purpose | Duration |
|---|---|---|---|
| sb-<project>-auth-token (may be split into …-auth-token.0 / .1) | Strictly necessary · cookie | Keeps you signed in to the AM8 application. Set only after you sign in; the public website never sets it. | Until you sign out or the session expires |
| aria_cookie_consent | Strictly necessary · localStorage | Records your consent choices, the policy version they were given against and the time you gave them, so we can honour them and evidence them under GDPR Article 7(1). | 12 months, then we ask again (also re-asked if this policy is versioned up) |
| aria_session_id | Strictly necessary · localStorage | A random identifier that links a consent decision to its server-side log entry. It carries no personal data and is not used to profile you. | Until you clear your browser storage |
| am8:intake-assist-draft:<your account id>:<system id> | Strictly necessary · sessionStorage | Holds an unconfirmed AI system description and the assistant's proposed answers to it while you decide whether to confirm or discard each one, so reloading the tab does not lose work in progress. Never sent to a third party. Cleared the moment you confirm or discard the proposal, and swept entirely when you sign out. | Until you confirm or discard it, sign out, or close this browser tab |
How to manage your cookie preferences
You can change or withdraw your consent at any time. To manage your cookie preferences, use the control below or the cookie banner. Disabling non-essential cookies will not affect strictly necessary cookies.