Cookie Policy
We use the smallest set of cookies that lets the product work. No advertising trackers, no analytics cookies unless you opt in, no banner with 47 vendors.
What we use
| Name | Purpose | Type | Lifetime |
|---|---|---|---|
__Host-ao_session | Keeps you signed in | Essential | 30 days |
__Host-ao_csrf | Cross-site request protection | Essential | Session |
__Host-ao_2fa | Holds a pending two-factor sign-in | Essential | 10 minutes |
__Host-ao_oauth_* | Protects the Google sign-in handshake | Essential | 10 minutes |
__Host-ao_appearance | Remembers your theme, accent colour and density in the web app | Essential | 1 year |
NEXT_LOCALE | Remembers your language | Essential | Session |
ao_theme | Remembers dark/light preference | Essential | 1 year |
ao_cookie_consent | Remembers your analytics choice (browser local storage) | Essential | Until you clear it |
sp_widget_conv_… | Support chat: keeps your conversation id so you can pick it up again (browser local storage, only after you start a chat) | Essential | Until you clear it |
ph_…_posthog | Pseudonymous analytics for the website and the web app, shared across altorbit.app — set only if you accept analytics | Analytics | 1 year |
Names starting with __Host- are set by the web app on app.altorbit.app and locked to that exact domain. NEXT_LOCALE is used by both the website and the web app; the rest belong to this website. Two entries live in your browser's local storage rather than in cookies. The web app also keeps interface state in local storage — for example, your email address if you ask it to keep you signed in.
What we don't use
- Google Analytics, Meta Pixel, or any advertising tracker.
- Advertising or retargeting cookies.
- Cross-site identifiers or fingerprinting.
Everything above except analytics is strictly necessary, and under ePrivacy (Art. 5(3)) strictly necessary storage doesn't require consent. The one exception is analytics: we use PostHog on this website and in the web app, and it only starts after you accept it — in the consent banner here, or when the app asks. Decline, and no analytics cookies are set. With your consent, PostHog on this website may also record clicks and scroll positions (heatmaps) and how you move through the pages (session recordings); anything you type into form fields is masked before it leaves your browser, and pages opened from sign-in or invite links are not recorded. If you accept in both places, the analytics cookie is shared across altorbit.app, so your website visits are linked to your account. We also measure page-load speed with Vercel Speed Insights: it sets no cookies, stores nothing in your browser and reports anonymous performance numbers. Cloudflare, which protects our domains and checks our forms for bots, may set its own short-lived security cookies (such as __cf_bm).
Your controls
Change your analytics choice any time via Cookie settings in the footer (or in the app's settings) — withdrawing is as easy as accepting, and it stops analytics and removes its cookies. You can also clear this site's data (cookies and local storage) in your browser; that signs you out and resets your theme preference. We don't use server-side fingerprinting to re-identify you after that.
Questions
Email privacy@altorbit.app. The full Privacy Policy covers everything beyond cookies.