Last Updated: October 8, 2026
Cookies are small text files stored on your device when you visit a website. They enable efficient website operation and provide information to site owners about how the site is being used. We also use browser local storage, which works in a similar way, and this policy covers that too.
We use cookies and similar technologies in three groups: cookies we need to run the service, cookies that measure how our website and app are used, and cookies that measure our advertising. Only the first group is set without asking you. The other two are set only if you allow them in our cookie banner. We do not show ads inside Askalytics.
When you first visit www.askalytics.io or app.askalytics.io, a consent banner run by CookieYes offers two buttons: Accept All and Reject All. To choose by category, or to change your mind later, click the round cookie button in the bottom left corner of any page. Your choice is stored for one year in a cookie called cookieyes-consent, and CookieYes keeps a log of it for us as proof of consent. If you reject optional cookies, the analytics and advertising tools below do not load.
The first three are set by Askalytics itself on app.askalytics.io. They are HttpOnly and Secure, cannot be read by scripts, and are not shared with anyone.
| Cookie | Purpose | Duration |
|---|---|---|
| auth_token | Keeps you signed in | 7 days (24 hours on the public demo) |
| analytics.session | Keeps your place during sign-in, two-factor checks, and Google authorization | 24 hours |
| pending_invite | Carries a team invitation through sign-up | 24 hours |
| cookieyes-consent | Remembers your cookie choices (set by CookieYes) | 1 year |
| __cf_bm | May be set by Cloudflare for bot protection on www.askalytics.io and on the Turnstile check in our sign-up and sign-in forms | 30 minutes |
Set only if you allow the Analytics category. Durations are the vendors' documented defaults.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
| _ga, _ga_EPJHRTGCX5 | Google Analytics 4 | Counts visits and tells returning visitors from new ones across www.askalytics.io and app.askalytics.io | Up to 2 years (most browsers cap this at about 13 months) |
| _clck, _clsk, CLID, MUID, ANONCHK, SM | Microsoft Clarity and Bing | Groups your page views into one session so we can see where the product confuses people | From one session up to about 13 months |
Microsoft Clarity records sessions. If you allow analytics cookies, Clarity replays how a page was used: mouse movement, scrolling, clicks, and the page content as it appeared to you. This includes pages inside your Askalytics account that show your own analytics figures. When you are signed in, we pass Clarity a one-way hashed version of your email address and your first name so a recording can be matched to your account if you report a problem. We never send Clarity your password or payment details. Clarity is a Microsoft service, and Microsoft's privacy statement applies to what it collects. You can switch this off by rejecting analytics cookies.
Set only if you allow the Advertisement category. We use them to tell which of our Google Ads brought someone to Askalytics and whether they went on to sign up or connect a website.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
| _gcl_au, _gcl_aw, _gcl_gb | Google Ads | Records that you arrived from one of our ads so we can measure which ads work | Up to 90 days |
| IDE, test_cookie | Google (DoubleClick) | Advertising measurement | Up to 13 months |
Our banner also offers Functional and Performance categories. We do not set any cookies in these two groups today. They are there so your choice is already recorded if we add one.
As well as cookies, the app keeps a small amount of information in your browser's local or session storage. None of it is sent to other companies.
| Key | Purpose |
|---|---|
| ask_attr_first, ask_attr_last | Records how you first found us and how you arrived most recently: the referring site, the landing page, any campaign tags in the link, any advertising click identifier, and the Google Analytics visitor identifier. Used by our ad and analytics reporting when you sign up |
| add-property-form-data, add-property-current-step, add-property-service-account | Lets you leave the add-a-website setup part way through and come back to it |
| pendingPlan, pendingInviteToken | Carries a chosen plan or a team invitation through sign-up |
| ai-insights-feedback, pending-tour, start-tour-on-load, show-tour-selector-after-redirect | Remembers which insights you have rated and your product tour progress |
| aw_signup_conversion_fired | Stops one sign-up being counted twice in our ad reporting |
| demoBannerHidden, demo-welcome-dismissed, chunk-reload-at, chunk-reload-count | Remembers dismissed messages and recovers the app after an update |
Google may set its own cookies when you sign in via Google OAuth. These are governed by Google's Privacy Policy. Stripe sets its own fraud-prevention cookies on Stripe's checkout and billing pages, not on ours, governed by Stripe's Privacy Policy.
You can change your choice at any time with the round cookie button in the bottom left corner of any page. You can also control cookies through your browser settings: delete existing cookies, block cookies from specific sites, or set your browser to clear cookies when closed. Note: blocking the necessary cookies will prevent you from using the platform.
We will update this page when our cookie usage changes.
Questions about our cookie usage: [email protected]