This document explains which cookies and similar technologies Convomint uses, what they are for, and how you can manage them.
1. What cookies are
Cookies are small text files stored in your browser while using a website. Among other things, they keep you logged in and protect forms against abuse. Similar technologies (e.g. localStorage) work analogously.
2. How we use cookies
We use only cookies essential for the Service to function (login, session, CSRF security). Product analytics (understanding feature usage, without review or survey content) runs without storing cookies or any other identifier on your device, both on the public website and in the application. We do not use advertising cookies and do not share data for third-party marketing. Public website statistics are collected anonymously by PostHog, without cookies.
3. Cookies we set
The table below lists cookies set within the Service:
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| convomint_session | Convomint (first-party) | Essential — keeps the logged-in user session | session / until logout |
| XSRF-TOKEN | Convomint (first-party) | Essential — protects forms against CSRF attacks | session |
| remember_web_* | Convomint (first-party) | Essential — the "remember me" login option | up to ~400 days |
| p360_signed_in | Convomint (first-party) | Technical — the public site shows “Go to dashboard” instead of “Log in”; no personal data | session |
| p360_no_track | Convomint (first-party) | Technical — turns statistics off for administrator, impersonation and demo sessions; no personal data | session |
| p360_internal | Convomint (first-party) | Technical — a browser where a platform administrator signed in is left out of statistics; no personal data | 1 year |
| __stripe_* | Stripe | Payment security and fraud prevention — only on payment pages | session – 1 year |
4. Managing cookies
You can delete and block cookies in your browser settings. Blocking essential cookies will prevent logging in and using the application. You can object to product analytics by writing to [email protected] or contacting your organisation's administrator.
5. Third-party cookies
During payment you are redirected to Stripe, which sets its own cookies (including fraud prevention) in accordance with Stripe's privacy policy. Google sign-in (SSO) is subject to Google's cookie policy on Google domains.
6. Changes and contact
We will announce changes to this policy in the Service. Questions about cookies and privacy: [email protected].