Last updated October 4, 2026

# Cookie Policy

What is stored on your device and how to control optional analytics.

## 1. Your choice

The website works without optional analytics. Choose “Reject optional” to keep it off, “Accept all” to allow the available optional category, or “Manage preferences” to decide. We do not treat silence, scrolling, visiting another page, or submitting a form as consent.

Cookie preferences lets you change or withdraw your choice at any time. Withdrawal stops future collection; it does not make earlier processing unlawful. Your email subscriptions have separate unsubscribe controls.

## 2. Cookies and similar storage

Cookies are small values a browser can send back to a website. Local storage keeps values in your browser until they are removed; it does not have an automatic browser expiry. Session storage generally lasts for a browser tab’s session. All of these technologies can fall under Section 25 TDDDG. Calling analytics “cookieless” does not remove the need to assess consent.

For strictly necessary storage used to provide a service you request, we rely on Section 25(2) no. 2 TDDDG. Optional device access requires consent under Section 25(1). Where personal data is processed, the separate GDPR legal bases in our [Privacy Policy](https://getevident.app/privacy) also apply.

## 3. Storage on the public website

Storage used by the website and its analytics provider

| Name / provider | Purpose and category | Duration |
| --- | --- | --- |
| c15t · first-party cookie | Records your consent categories, timestamp, and consent identifiers. Essential. | 180 days from being written; replaced when your choice changes. |
| c15t · local storage | Local copy of consent preferences. Essential. | Until overwritten or cleared; local storage has no automatic browser expiry. |
| did · Databuddy local storage | Visitor identifier for analytics. Optional, only after Analytics consent. | Until cleared or removed by the tracker; no fixed browser expiry. |
| Databuddy session storage | Session identifier and timing information. Optional, only after Analytics consent. | Browser tab/session lifetime, subject to browser session restoration. |

Databuddy’s session keys are managed by the provider’s current script. They are described by purpose here rather than claiming a fixed key name. It receives technical requests and analytics data after consent; browser storage duration is separate from server retention. See [Databuddy’s data policy](https://www.databuddy.cc/data-policy) and our [retention explanation](https://getevident.app/privacy#retention).

## 4. Security and account login

Cloudflare can use security cookies when a configured protection or challenge is triggered. For example, its documented `__cf_bm` cookie expires after 30 minutes of inactivity, and `cf_clearance` follows the site’s challenge-passage setting. This does not mean either cookie is set on every visit. They must serve a necessary security function, rather than analytics or advertising, to qualify as essential. See [Cloudflare’s cookie documentation](https://developers.cloudflare.com/fundamentals/reference/policies-compliances/cloudflare-cookies/).

If you proceed to Stripe Checkout, Stripe can use storage required for payment, fraud prevention, and the checkout functions you select. See [Stripe’s cookie policy](https://stripe.com/legal/cookies-policy). Stripe is not loaded merely to display the public landing page.

WorkOS authentication and the Evident application use necessary session and login state when you request account access. Cookie names and lifetimes depend on the application’s authentication configuration. Joining the public waitlist does not start a WorkOS login session. Any identity provider you select for single sign-on also supplies its own notice.

## 5. Optional tracking

Databuddy is the website’s optional analytics service. Its script and collection requests remain blocked until you allow Analytics. The site does not currently load Meta Pixel or Google advertising/conversion tags. Adding a new optional purpose requires updated information and the necessary consent before activation.

## 6. Global Privacy Control and Do Not Track

When your browser communicates Global Privacy Control (GPC) or Do Not Track (DNT), this website blocks optional Databuddy analytics, including successful-form events. The signal takes priority over an earlier Analytics choice. Essential consent storage and functions you request remain available. If you change a browser setting while a page is open, reload that page so the new setting is applied.

This describes the public website’s analytics behavior. The signal does not automatically delete earlier records or unsubscribe you from email. For other privacy requests, use the contact in our [Privacy Policy](https://getevident.app/privacy#us-rights).

## 7. Changing or clearing your choice

Use Cookie preferences and choose “Reject optional” or save your revised settings. The page reloads when optional consent is revoked to stop already loaded analytics. This does not automatically erase data already held by a provider; you can exercise your rights through the [privacy contact](https://getevident.app/privacy#rights).

You can also remove cookies, local storage, and session storage using your browser’s site-data controls. Deleting only cookies may leave the local-storage copy of your choice. Blocking essential storage may make us ask again and can prevent login sessions from working.

Canonical page: https://getevident.app/cookies