Cookie and storage policy
Necessary storage keeps the service working. Optional measurement is your choice.
Effective 25 October 2026, version 2026-10-25
Your controls
Use Privacy choices on any page to accept, reject or change optional categories. Both analytics and browser diagnostics start off. No optional SDK or Google consent-mode ping is sent before the relevant opt-in. Declining does not block the service. Withdrawal removes accessible optional identifiers and reloads the page to unload the SDKs. It stops future collection, rather than automatically erasing records already lawfully received by a provider.
A Global Privacy Control or Do Not Track signal keeps optional tools off. A choice applies to this browser and is remembered for up to 180 days; another browser or cleared/expired storage may prompt again. If storage is blocked, optional tools remain off until a choice can be saved.
Storage inventory
| Storage / provider | Purpose | Duration and category |
|---|---|---|
| trylane_privacy / Trylane | Consent version, choices and timestamp, stored in a first-party cookie. | 180 days; necessary preference. |
| Authentication cookies / Clerk | Keep you signed in, protect authentication and complete the selected sign-in method. | Session/provider-configured expiry; necessary. Clerk documents its current cookie names and durations. |
| trylane_visit_[id] / Trylane | HttpOnly scoped access credential for the specific demo session. | At most one hour; necessary. Server expiry/revocation may invalidate it earlier. |
| ledger_visitor / reference demo | HttpOnly visitor access on the separate reference application origin. | At most one hour; necessary, with online expiry checks. |
| trylane_pending_invite / Trylane session storage | Preserve a one-use invitation during authentication, without putting it in analytics or query strings. | Until invitation acceptance or browser-tab closure; necessary. |
| _ga and _ga_[measurement ID] / Google Analytics | Distinguish opted-in public-page visits and retain analytics session state. | Up to 180 days in our tag configuration; optional analytics. Your browser may shorten this. |
| PostHog in-memory state | Ephemeral identifier and approved page views. No PostHog cookie/local-storage persistence is enabled. | Current document lifetime; optional analytics. |
| Sentry in-memory state | Filtered browser error reporting; no replay or profiling is enabled. | Current document lifetime; optional diagnostics. Server error reporting does not use browser storage. |
What is excluded
There is no advertising, session replay, heatmap capture, form autocapture or account identification in the optional integrations. Google Analytics is restricted to selected public information pages. Authentication, support forms and visitor demos are excluded from its tag. PostHog receives only allowlisted, normalized public/workspace page views; unknown routes and authentication/demo routes are excluded.
Third-party checkout or identity-provider pages have their own necessary processing and notices. We do not control cookies placed while you interact directly with those separate services. Browser settings can remove cookies or restrict storage, but blocking necessary authentication/access storage may prevent those features from working.
Questions about this document? contact@trylane.app