Scope
This policy describes cookies and browser storage used by the Agnicode company site and customer platform. A cookie is a small value stored by your browser and sent with matching requests. Local and session storage remain in the browser and are not sent automatically with every request.
Cookie inventory
| Cookie or group | Purpose | Typical duration | Category |
|---|---|---|---|
__Host-platform_session | Session metadata that tells the server an account is signed in and when the session expires | Up to 7 days, or earlier logout/expiry | Strictly necessary |
__Host-platform_id_token, __Host-platform_access_token, and __Host-platform_refresh_token | Encrypted, HTTP-only sign-in tokens the server uses to call the platform API on your behalf. Browser scripts cannot read them. | Up to 7 days, or earlier logout/expiry | Strictly necessary |
__Host-platform_organization_context | Keep the verified active organization boundary stable | Up to 7 days, reset on account or organization changes | Strictly necessary |
__Host-pkce_…, one per sign-in in progress | Protect and complete OAuth sign-in, return to the intended page, and carry the revision of the Terms and Privacy Notice you accepted on the sign-in page until the acceptance is recorded against your account | 10 minutes or completion of sign-in | Strictly necessary |
__Host-consent_grant | Records that you accepted the Terms and Privacy Notice on the sign-in page, until the sign-in it opens begins | 10 minutes or the start of sign-in | Strictly necessary |
__Host-continue_account | When you continue from an Agnicode product such as ArchiDepth and have not yet accepted the current Terms and Privacy Notice, names the account you are agreeing for (its identifier and a masked email) on the agree screen, so the sign-in that follows opens only that account | 30 minutes or the end of that sign-in | Strictly necessary |
__Host-passkey_return_to | Return to the security page after adding a passkey | 10 minutes or completion of sign-in | Strictly necessary |
__Host-platform_signed_out | After a password change signs every device out, carries that reason through the sign-out so the sign-in page can tell you why you were signed out | 10 minutes or the next page you open | Strictly necessary |
agnicode_dashboard_checklist_dismissed | Remembers that you dismissed the getting-started checklist on the dashboard so it is not shown again | Up to 1 year | Preference |
agnicode_analytics_consent | Remember allow or decline for optional site analytics | Up to 1 year | Preference |
_ga and _ga_<id> | Google Analytics: distinguish visits and sessions so we can count unique visitors and understand how pages are used. Set only after you choose Allow analytics, and removed if you later decline or reset the preference. | 13 months from your most recent visit | Analytics (optional) |
Optional analytics
Anonymous audience measurement. To know which pages are useful, we count page views, clicks on our main calls to action, and how far pages are scrolled. These are totals only: no cookie or browser storage is used, no identifier is created, and your IP address is not read or stored. We record only the page, the website that referred you (its name, not the full link), a broad device type, and the country our network provider reports. This runs without asking, as audience measurement of this kind is permitted, but you can switch it off: choosing Decline, or an enabled Global Privacy Control signal, stops it along with everything below.
Error reporting, with nothing stored on your device. When a page breaks, Grafana Faro records the error type, the page path with identifiers removed, and your browser's name and version, so we can find and fix the fault. Nothing else about your browser or device is sent: not the full browser identification string, operating system, language, or screen size, and no page timings or performance measures. It sets no cookie, writes nothing to browser storage, and does not read your account or location. Reports from one page carry a random id that is held only in that page's memory, is gone when the page is closed or reloaded, and is never linked to you. Because it stores nothing on your device and identifies no one, it runs regardless of your analytics choice; our legal basis is our legitimate interest in keeping the site working, as the Privacy Notice explains.
Optional analytics, only with your permission. If you choose Allow analytics, we also use Google Analytics and Grafana Faro tracing. Google Analytics sets the cookies listed above so we can count unique visitors and sessions and see how people move through the site — pages viewed, links and buttons clicked, scroll depth, and time spent. Grafana Faro follows your requests to our servers (tracing) and records page performance — load timings and Core Web Vitals — and security-policy violation reports; it keeps one page-load id in session storage, listed below. Neither starts until you allow it.
We do not use advertising trackers. Google Analytics runs with Google Signals and advertising personalisation turned off, so it is not used for advertising or cross-site profiling. We never send names, email addresses, phone numbers, or account identifiers to either service: query strings are removed except campaign tags (such as utm_source), and known tenant, product, invoice, and credit-note identifiers are stripped before export. Neither captures console output, precise location, or form contents. Declining or resetting the preference stops both at once and removes the Google Analytics cookies and the Faro page-load id; only the error reporting described above continues.
Local and session storage
The platform may store the following in local storage: your theme preference (platform-theme:v2); guided-tour progress (agnicode:guided-tour:v1: followed by the tour); when you last opened the support panel (agnicode:support:last-seen); and short-lived coordination state for the active organization (agnicode:organization-session:event), so other open tabs follow a switch.
Session storage may hold a short-lived deployment recovery value (platform-chunk-reload-at) to avoid repeated reloads, and, for up to 10 minutes, the action you were completing when we asked you to sign in again (agnicode:reauthentication-resume-intent) so it can resume, and an organization invitation link's token from the moment you open the link until you sign in and answer it (agnicode:invite-token), and, for up to 2 minutes, a confirmation to show once on the next page when an action ends by loading a new page, such as deleting an organization (agnicode:flash-toast). Only after you allow optional analytics, Grafana Faro keeps a page-load id there (com.grafana.faro.lastNavigationId) to tie page timings to the page they measure.
These values support interface operation, stay in your browser, and are not used for advertising. Signing out clears the user-scoped values, and values that earlier releases kept, such as recent search terms (platform-search-recent), are deleted when found.
Your controls
You may decline optional analytics without losing access to the public site. Resetting the preference shows the consent choice again. Browser controls can remove other site data, but blocking strictly necessary cookies prevents secure sign-in and account sessions from working.
External services
The problem-intake form uses Cloudflare Turnstile as a strictly necessary security control. Cloudflare may process browser, device, and network signals needed to distinguish legitimate use from automated abuse; it is not used by Agnicode for advertising.
Grafana Labs processes the browser error reports and, with your permission, the tracing and performance data described above to provide error, performance, and request views to Agnicode. The browser uses only the public Frontend Observability collector URL and never receives the private backend OTLP token. Anonymous audience totals are recorded by our own servers and reported to Grafana as aggregate counts.
Google processes optional Google Analytics data, only after you allow it, to provide Agnicode with visitor and usage reports. Google may process this data outside India; see Google's privacy policy for how it handles analytics data.
If you follow a link to an external product, booking, identity, or payment service, that destination may use cookies under its own notice. Review the destination's controls when it opens. See the Privacy Notice for providers and personal-data processing beyond browser storage.
Changes and contact
We update this inventory when storage purposes or durations materially change. Questions can be sent to privacy@agnicodetechnologies.com.