Legal · Cookie Policy

Cookie Policy

This cookie policy helps PrivyCDP visitors understand browser storage, typography and optional analytics on this customer data platform (CDP) website. The settings described here are separate from the data flows in a customer deployment.

Editorial updated:

1. Our Privacy-First Approach

This policy describes the website’s browser storage and optional analytics. Analytics is off until you allow it. Portal sessions, saved drafts and chat history have separate purposes and lifetimes described below.

What We Actually Use:

  • Local browser storage for your preferences (theme, accessibility settings)
  • Session storage for popup display state in the current tab
  • A customer portal session cookie when you sign in
  • Locally hosted Inter and JetBrains Mono fonts
  • Optional Google Analytics cookies, only after you allow analytics

2. Browser Storage We Use

Preferences and session state

Preferences and session state are used by the relevant features; optional analytics remains a separate choice.

  • Theme preferences: Your dark/light mode selection
  • Accessibility settings: Text size, contrast, motion preferences
  • Sidebar state: Whether navigation is expanded or collapsed
  • Portal authentication: A session cookie issued by the portal API

Control: You can clear this anytime via browser settings

Drafts, chat and temporary state

Intake and deployment-checklist drafts, chat history and popup dismissal preferences use local storage as listed below. These values are not all removed when a tab closes. The intake draft has a configured expiry; the deployment draft is removed when submitted or cleared.

The popup-shown marker uses session storage for the current tab. Browser settings can clear locally stored drafts and preferences. Local storage behavior does not establish how long any chat or inquiry data is retained on a server.

PWA & Performance

The application manifest provides installation metadata. It does not establish offline support.

  • Service workers: The application unregisters legacy service workers; offline page caching is not provided.
  • Application manifest: PWA installation data

Purpose: Browser installation metadata and normal HTTP caching

3. External Resources

We use minimal external resources, each serving a specific functional purpose:

Self-hosted fonts

Inter and JetBrains Mono font files are served from this website.

Privacy: Typography does not request Google Fonts or set font-related tracking cookies

Customer portal authentication

The portal API issues a session cookie when authentication succeeds. The current code configures a 12-hour session and clears its cookie on logout.

Scope: Portal session state is separate from optional marketing analytics.

Optional Google Analytics 4

When you choose Allow analytics, we load Google's analytics tag to measure visits to public marketing pages. Google receives a cookie-based browser identifier, basic browser/device information and public page views. The request also reaches Google from your network connection.

We send canonical public page addresses without URL queries or fragments, and do not send form contents, personalized page titles or referrer URLs. Login, portal, member, contract review, shared qualification summaries and unknown routes are excluded. Automatic form, search, link and history measurement, Google Signals and advertising personalization are disabled.

Analytics stays off until you allow it. Global Privacy Control and Do Not Track keep it off. Use Cookie settings to change your choice at any time. Declining removes this site's Google Analytics cookies and reloads the page to stop the analytics runtime. Your choice is remembered for 365 days; analytics cookies are configured to expire after 30 days.

Google Privacy Policy

What We DON'T Use:

  • Facebook Pixel
  • Marketing trackers
  • Advertising cookies
  • Cross-site tracking
  • Behavioral profiling

4. Your Control & Rights

Storage controls and requests

Use browser controls for local storage and contact the privacy team for requests concerning server-side data.

  • Analytics consent: Open Cookie settings to allow or decline optional analytics.
  • Clear Local Storage: Use browser developer tools (F12 → Application → Local Storage)
  • Reset Preferences: Use the accessibility reset button in our settings
  • Clear All Data: Use browser's "Clear browsing data" feature
  • Account Deletion: Contact the privacy team to request deletion and review applicable retention

Browser Settings

Standard browser controls for storage management:

  • Chrome: Settings → Privacy and Security → Site Settings → Cookies
  • Firefox: Options → Privacy & Security → Cookies and Site Data
  • Safari: Preferences → Privacy → Manage Website Data
  • Edge: Settings → Site Permissions → Cookies and Site Data

Privacy by Design: Our platform is built to minimize data collection. Most functionality works without any stored data.

5. Detailed Storage Table

Scroll horizontally to read all storage details →

Storage KeyPurposeTypeDuration
privycdp_theme
Dark/light color scheme preference
localStorage
Until cleared
accessibility-settings
Text size, contrast and motion preferences
localStorage
Until cleared
sidebar:state
Portal navigation expanded/collapsed
Cookie
7 days (configured)
privycdp_portal_session
Customer portal authentication
HttpOnly cookie
12 hours (configured); cleared on logout
chat_<session>_<mode>
Conversation history when chat features are used
localStorage
Until cleared
privycdp_org_id
Browser identifier for architecture-review continuity
localStorage
Until cleared
privy_audit_form_cache
Architecture intake draft
localStorage
48-hour configured expiry
privycdp_deployment_qualification_draft_v1
Deployment checklist draft
localStorage
Until cleared or submitted
audit-popup-shown
Popup display state for the current tab
sessionStorage
Session only
audit-popup-dismissed
Popup dismissal preference
localStorage
Until cleared
privycdp_analytics_consent_v1
Your analytics consent choice
localStorage
365 days
_ga / _ga_*
Optional analytics after consent
Cookie
30 days

6. Privacy Rights and Applicability

Rights to review where applicable:

  • Right to Access: Request access to personal information within the applicable scope
  • Right to Rectification: Request correction of inaccurate personal information
  • Right to Erasure: Request deletion, subject to applicable exceptions and retention duties
  • Right to Data Portability: Request a portable copy where the applicable rules provide for it
  • Right to Object: Review applicable objection and opt-out rights for the processing in scope

Rights and exceptions depend on the processing and applicable law. See the GDPR text and California Privacy Protection Agency resources. Clearing browser storage does not delete server-side records; contact the privacy team about those records and their retention.

7. Updates to This Policy

We may update this Cookie Policy to reflect changes in our practices or applicable laws. Any material changes will be prominently displayed on our website.

Version Control: The editorial revision date is shown on this page. It records a copy update and does not assert legal review or approval.

8. Contact Us

Questions about our cookie usage or this policy? We're here to help:

PrivyCDP Privacy Team
Email: Contact Us

Contact the privacy team with questions about this policy; no response-time SLA is asserted here.

Designed to support SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS and FedRAMP evaluations; deployment evidence required

Discuss your deployment with engineers.

Bring your data flow, operating owners and evaluation questions.

Request an architecture reviewReview Enterprise TCO Model →Request permissioned references and release-specific evidence during evaluation.

Further reading

Published: · Updated:

Editorial dates describe content changes. Confirm current sources before making legal, security or purchasing decisions.