Cookie Policy
Last updated
Draft
Draft. Pending legal review.
The short version
- We count visits with PostHog in a cookieless mode: no cookies, and the only thing stored is your consent choice.
- Only after you click Accept does PostHog set cookies and record heatmaps and session replays, and link an email you give us in a form, the assistant or a booking to your visits. Decline and it stays cookieless.
- The AI assistant and Cal.com booking widget set functional storage only when you use them.
- You can change your mind any time via "Cookie settings" in the footer.
What is a cookie
A small text file a site stores in your browser. We use the word loosely here to also cover localStorage and similar browser storage.
Categories
Necessary (always on)
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
cc_cookie |
symorpha.com (vanilla-cookieconsent) | Remembers your consent choice so we don't ask again | 6 months |
sym.lang |
symorpha.com, first party | Remembers the site language so we serve the page in it | 1 year |
theme (localStorage) |
symorpha.com | Remembers light/dark theme | Until cleared |
__ph_opt_in_out_<project> (localStorage) |
PostHog, first-party on symorpha.com | Remembers your analytics choice so PostHog stays cookieless after a reject; cleared when your banner choice expires | Until your consent choice expires |
sym.agent (sessionStorage) |
symorpha.com | Keeps your assistant conversation while the tab is open | Tab session |
sym_agent |
symorpha.com | Signed session for the assistant: proves the person check passed and counts messages (no personal data) | 24 hours |
| Cloudflare Turnstile | Cloudflare | Checks you are a person before the assistant starts | Session |
Vercel edge cookies (e.g. _vercel_*) |
Vercel | Security, bot protection and rate limiting on the assistant API | Session to 1 year |
These cannot be switched off; the site would not work properly without them.
Analytics (needs consent)
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
ph_<project>_posthog (cookie and localStorage) |
PostHog, first-party on symorpha.com | Recognises your browser across visits so PostHog can build heatmaps, session recordings and returning-visitor stats | 1 year |
Without consent PostHog runs cookieless and none of the above is set. When you withdraw consent we stop recording, switch PostHog back to cookieless mode and delete these cookies.
Functional (set when you use the feature)
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
| Cal.com embed storage | Cal.com | Keeps the booking widget state (timezone, selected slot) | Session |
| WhatsApp click-to-chat | WhatsApp / Meta | Only triggered if you click the WhatsApp button; subject to Meta's policies | n/a |
The AI assistant
The assistant does not set tracking cookies. Your messages are sent to our server and then through Vercel AI Gateway to a language model provider to produce replies. If you leave contact details, the transcript is stored with your lead; see the Privacy Policy section 2.3.
Changing your choice
Click Cookie settings in the footer, or clear cookies for symorpha.com in your browser. Most browsers also let you block third-party cookies entirely; the site will still work.
Updates
We will update this page when we add or remove a tool. The date at the top tells you when.