Cookie Policy

Last updated: 2026-09-07

1. Overview

This Cookie Policy explains how Spamless.dev uses cookies and similar local-storage technologies on our website and admin console. We keep this to a minimum: we use only what is strictly necessary to run the service, plus — strictly with your consent — monitoring technology to keep the service reliable and analytics to see which pages are used. We do not use advertising or cross-site tracking cookies.

2. Categories we use

2.1 Strictly necessary (always active)

Required for the service to function; exempt from consent under the ePrivacy rules. These cannot be switched off.

  • Session cookie — a secure, httpOnly cookie set after you log in to keep you signed in. Not readable by scripts; cleared on logout.
  • Consent record — stores your cookie choice (in localStorage) so we don’t ask again.
  • Security/session integrity — short-lived values used to protect requests.

2.2 Monitoring & analytics (opt-in)

Loaded only after you opt in via the cookie banner. They help us detect errors, measure performance and see which pages are used, so we can improve reliability and the product.

  • Sentry — client-side error and performance monitoring. PII collection is disabled (sendDefaultPii: false). Not loaded until you consent; rejecting keeps it off entirely.
  • Google Analytics — aggregated usage statistics (Google Ireland Limited, EU/Ireland). Sets the cookies _ga and _ga_<container-id> (2 years each) to recognise a returning visit. We measure which pages are visited, in which language and from which country; IP addresses are not stored (GA4). We grant Google no advertising signals, so no advertising or cross-site profile is built. Data may be transferred outside the EEA under the European Commission’s standard contractual clauses and Google’s Data Privacy Framework certification. Not loaded until you consent; withdrawing stops it and deletes its cookies.

2.3 Live chat (opt-in)

Loaded only after you opt in via the cookie banner. Powers our support chat so you can talk to us.

  • Crisp — live-chat widget (Crisp IM SARL, EU/France). Sets first-party cookies to keep your chat session and history. Not loaded until you consent; rejecting keeps it off entirely.

3. We do not use

  • Advertising or marketing cookies
  • Cross-site tracking or advertising profiles — Google Analytics is granted no advertising signals, so it builds neither
  • Data brokering or profiling for ads

4. Managing your choice

You choose your preference in the cookie banner when you first visit, and you can change or withdraw it at any time with the of any page, which reopens the banner with your current choices. Withdrawing consent stops any further monitoring and analytics, revokes the analytics signal and deletes the analytics cookies; data already collected is handled per our Privacy Policy.

5. Retention

Strictly-necessary values last only as long as your session (the auth token) or until you clear them (the consent record). The Google Analytics cookies expire after 2 years, and are deleted as soon as you withdraw your consent. Monitoring and analytics data retention is governed by our processors’ defaults and our Privacy Policy.

6. Contact

Questions about cookies? Email privacy@spamless.dev. See also our Privacy Policy.