Legal
Cookie Policy
Last updated: 16 February 2026
1. What Are Cookies
Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work, to improve efficiency, and to provide information to site owners.
2. How We Use Cookies
We use strictly necessary cookies on our management portal and analytics cookies (with your consent) on our marketing website. We do not use advertising cookies, social media cookies, or retargeting cookies.
Marketing Website (www.aispendops.com)
Our marketing website uses Google Analytics to understand how visitors use the site. These cookies are only set after you give consent via the cookie banner shown on your first visit.
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
| _ga | Distinguishes unique visitors | Analytics | 2 years |
| _ga_* | Maintains session state for Google Analytics | Analytics | 2 years |
If you decline cookies, no analytics cookies are set and no data is sent to Google. Your preference is stored in your browser's local storage as aispendops_cookie_consent.
Management Portal (dashboard.aispendops.com)
The management portal uses the following cookies for authentication and session management:
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
| __auth_token | Encrypted authentication session | Strictly necessary | Session / 24 hours |
| __auth_refresh | Encrypted refresh token for session renewal | Strictly necessary | 7 days |
| __auth_cv | PKCE code verifier during OAuth login flow | Strictly necessary | 10 minutes |
| __auth_state | CSRF state parameter during OAuth login flow | Strictly necessary | 10 minutes |
All cookies are HttpOnly and Secure (only transmitted over HTTPS). They are first-party cookies set by our domain only.
3. Local Storage
The management portal uses browser local storage for:
| Key | Purpose |
|---|---|
| aispendops_active_tenant | Remembers your last selected company so you don't need to re-select it each visit |
4. Third-Party Cookies
Google Analytics: if you accept analytics cookies, Google may set cookies on our domain to measure website usage. Data is processed by Google in accordance with their privacy policy. We use Google Analytics 4, which does not store IP addresses.
Auth0: our authentication provider may set cookies on their own domain during the login flow. These are governed by Auth0's cookie policy and are not accessible to us.
5. Consent
Strictly necessary cookies (authentication and session cookies on the management portal) do not require consent under the EU ePrivacy Directive, UK PECR, or equivalent legislation.
Analytics cookies (Google Analytics on the marketing website) require your consent before being set. A cookie banner is shown on your first visit. You can accept or decline, and your choice is remembered.
To change your preference, clear your browser's local storage for this site or use your browser's developer tools to remove the aispendops_cookie_consent key. The consent banner will reappear on your next visit.
6. Managing Cookies
You can control and delete cookies through your browser settings. However, if you block our strictly necessary cookies, the management portal will not function correctly, and you will not be able to sign in.
For more information on managing cookies in your browser, visit allaboutcookies.org.
7. Changes
We may update this Cookie Policy from time to time. Changes will be posted on this page with an updated effective date.
Contact
Questions about cookies? Please contact us through our contact form.