Cookie Policy
1Close AI Cookie Policy.
Last updated: 11 July 2026
1. Introduction
Our website and platform use cookies and similar technologies to distinguish you from other users, keep you signed in, connect third-party integrations securely, and understand how our site is used. This helps us provide a good experience when you browse our website and allows us to improve our services.
This Cookie Policy explains what cookies and similar technologies we use, why we use them, and how you can control them. It should be read together with our Global Privacy Policy.
2. What is a cookie?
A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your device. Cookies contain information that is transferred to your device. They are widely used to make websites work, to keep users signed in, and to provide information to site owners.
We also use similar technologies such as local storage (for example, to remember your theme preference). Where this policy refers to "cookies," similar technologies are included unless we say otherwise.
3. Categories of cookies we use
We use the following categories of cookies and similar technologies:
3.1 Strictly necessary cookies
These cookies are required for the operation of our website and platform. They include, for example, cookies that enable you to log into secure areas, maintain your session, complete OAuth connection flows for integrations such as Zoom, Gmail, Google Calendar, and Slack, and remember your cookie consent choices. You can switch off these cookies in your browser settings, but you may then not be able to access all or parts of our website or platform.
3.2 Analytical or performance cookies and technologies
These allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us improve the way our website works.
On our public marketing website, on Install Chat (/workspace/install), and within our authenticated application (/workspace), we use Google Analytics 4 (via Google Tag Manager) and Hotjar for analytics and behaviour diagnostics. This includes heatmaps and session recordings so we can understand how users interact with the product and improve usability. Session recordings are masked so that text entered by you or others is hidden by default; we do not use them to read the content of your deals, messages, or other business data. In the UK, EEA, and similar regions, these are not set until you consent to statistics cookies through our consent banner. In the United States, they may be set when you visit.
We also use Vercel Web Analytics and Vercel Speed Insights on the site, which operate without setting traditional browser cookies for basic usage measurement.
3.3 Functionality cookies and similar technologies
These are used to remember choices you make (for example, your dark or light theme preference) so your browsing experience is more convenient when you return.
3.4 Targeting or advertising cookies
We use Google Ads remarketing, the LinkedIn Insight Tag, and the X (Twitter) Pixel (via Google Tag Manager) to measure advertising performance and show relevant ads to visitors who have been to our website.
How this works depends on where you are:
- United States: Statistics and marketing cookies (including Google Ads remarketing, LinkedIn, and X) may be set when you visit our site, consistent with US state privacy laws. You can opt out via our cookie settings or your browser.
- United Kingdom, European Economic Area, and other regions: Marketing cookies are set only if you accept marketing cookies through our consent banner.
We may add additional advertising tags (for example, Meta Pixel) in future. If we do, they will be listed in the table below.
4. Cookies and similar technologies we use
You can find more information about the individual cookies and similar technologies we use, and the purposes for which we use them, in the table below. A live declaration of cookies detected on our site is also shown at the bottom of this page.
| Cookie / technology | Name | Category | Purpose | Duration |
|---|---|---|---|---|
| Supabase authentication | sb-*-auth-token (and related Supabase session cookies) | Strictly necessary | Keeps you signed in and refreshes your session securely | Session / per Supabase defaults |
| Zoom OAuth state | zoom_oauth_state | Strictly necessary | Protects the Zoom integration connect flow (CSRF) | Short-lived (connect flow) |
| Gmail OAuth state | gmail_oauth_state | Strictly necessary | Protects the Gmail integration connect flow (CSRF) | Short-lived (connect flow) |
| Google Calendar OAuth state | gcal_oauth_state | Strictly necessary | Protects the Google Calendar integration connect flow (CSRF) | Short-lived (connect flow) |
| Slack OAuth state | slack_oauth_state | Strictly necessary | Protects the Slack integration connect flow (CSRF) | Short-lived (connect flow) |
| Zoom onboarding | pending_zoom | Strictly necessary | Temporary state during Zoom onboarding | Short-lived |
| Admin preview | admin_preview_role | Strictly necessary (internal) | Allows authorised internal preview of role-specific UI | Session |
| Cookiebot (Usercentrics) | CookieConsent (and related CMP cookies) | Strictly necessary | Records and communicates your cookie consent choices | Per Cookiebot defaults (typically up to 12 months) |
| Theme preference | theme (localStorage) | Functionality | Remembers your dark or light mode choice | Until cleared in browser |
| Google Analytics 4 | _ga, _ga_*, _gid | Statistics (consent required in UK/EU; may run in US) | Distinguishes users and sessions for website analytics | Per Google defaults (typically up to 2 years) |
| Hotjar | _hjSession*, _hjIncludedInSessionSample, and related _hj* cookies | Statistics (consent required in UK/EU; may run in US) | Masked session recordings and heatmaps for website and product behaviour analysis | Per Hotjar defaults (typically up to 1 year) |
| Google Ads | _gcl_*, IDE, and related Google advertising cookies | Marketing (consent required in UK/EU; may run in US) | Remarketing, ad conversion measurement, and click attribution | Per Google defaults (typically up to 90 days – 2 years) |
li_sugr, bcookie, lidc, and related LinkedIn cookies | Marketing (consent required in UK/EU; may run in US) | Remarketing, ad measurement, and website audience building | Per LinkedIn defaults (typically up to 90 days – 1 year) | |
| X (Twitter) | personalization_id, muc_ads, guest_id, and related X cookies | Marketing (consent required in UK/EU; may run in US) | Ad conversion measurement, remarketing, and website audience building | Per X defaults (typically up to 13 months) |
| Vercel Web Analytics | — (cookieless) | Analytics | Aggregate page views and site usage | N/A — no browser cookie |
| Vercel Speed Insights | — (cookieless) | Analytics | Core Web Vitals and performance measurement | N/A — no browser cookie |
5. Server-side analytics (not cookies)
When you read articles on our public blog, we may record aggregate view and call-to-action events via a server-side request. This does not set a browser cookie. For more detail on how we handle personal data, see our Global Privacy Policy.
6. Third-party cookies
The third parties that may set or access cookies or similar technologies in connection with our site include:
- Supabase, Inc. — authentication and session management (platform)
- Vercel Inc. — hosting, Web Analytics, and Speed Insights
- Usercentrics A/S (Cookiebot) — cookie consent management on the public website
- Google LLC — Google Analytics 4, Google Tag Manager, and Google Ads remarketing on the public website
- Hotjar Ltd. (Contentsquare) — website behaviour analytics on the public website (statistics cookies, consent-gated in UK/EU)
- LinkedIn Corporation — LinkedIn Insight Tag for remarketing and website audiences on the public website (marketing cookies, consent-gated in UK/EU)
- X Corp. — X (Twitter) Pixel for ad conversion measurement, remarketing, and website audiences on the public website (marketing cookies, consent-gated in UK/EU)
Google Ads, LinkedIn, and X remarketing may set advertising cookies to measure campaign performance and build retargeting audiences. In the UK and EEA, these cookies require marketing consent. In the United States, they may be set on visit subject to applicable state privacy laws and your opt-out choices.
7. Cookie consent
We use Cookiebot (a consent management platform) on our public website to obtain and record your cookie preferences before non-essential cookies are set.
- Strictly necessary cookies (including consent storage) are always active.
- Statistics cookies (Google Analytics, Hotjar): in the UK, EEA, and similar regions, set only if you accept statistics cookies; in the United States, may be set when you visit.
- Marketing cookies (Google Ads remarketing, LinkedIn Insight Tag, X Pixel): in the UK, EEA, and similar regions, set only if you accept marketing cookies; in the United States, may be set when you visit.
You can change or withdraw your consent at any time via the cookie settings control on our website or through the Cookie Policy page. US visitors can also use browser-level controls and, where applicable, state privacy opt-out mechanisms described in our Global Privacy Policy.
We implement Google Consent Mode so that analytics and advertising tags respect your choices.
8. Your choices about cookies
You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse strictly necessary cookies, parts of our website or platform may not function properly (for example, you may not be able to stay signed in).
You can manage non-essential cookies through our Cookiebot consent banner and preference centre. Rejecting statistics cookies means Google Analytics and Hotjar will not run on your browser session.
To opt out of Vercel Web Analytics across sites that use it, you can use your browser's "Do Not Track" setting where supported, or contact us if you have questions about our analytics practices.
Except for essential cookies and short-lived OAuth state cookies, functionality preferences stored in localStorage persist until you clear them in your browser.
9. Changes to this policy
We may update this Cookie Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
10. Contact us
If you have any questions or concerns about our use of cookies, please contact us:
For broader privacy questions, see our Global Privacy Policy or contact our data privacy manager at the address above.