Legal
Cookie Policy
Last updated: 10 April 2026
1. What Are Cookies
Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work, to improve efficiency, and to provide information to site owners.
2. How We Use Cookies
We use strictly necessary cookies on our management portal and analytics cookies (with your consent) on our marketing website. We do not use advertising cookies, social media cookies, or retargeting cookies.
Marketing Website (www.aispendops.com)
Our marketing website uses two categories of cookies: strictly necessary cookies for bot detection on the chat widget (which require no consent under PECR / ePrivacy), and analytics cookies (Google Analytics) which are only set after you give consent via the cookie banner shown on your first visit.
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
| cf_chl_* | Cloudflare Turnstile bot challenge (set only when the chat widget is opened) | Strictly necessary | Up to 30 minutes |
| __cf_bm | Cloudflare bot management (mitigates automated abuse of the chat backend) | Strictly necessary | 30 minutes |
| _ga | Distinguishes unique visitors | Analytics (consent) | 2 years |
| _ga_* | Maintains session state for Google Analytics | Analytics (consent) | 2 years |
Cloudflare Turnstile is a privacy-preserving bot-detection service used to protect our marketing chatbot ("Amy") from automated abuse. The Turnstile script is loaded only when you open the chat widget, and the cookies are set only during that interaction. Turnstile does not track users across sites and does not use your data for advertising.
If you decline analytics cookies, no Google Analytics cookies are set and no data is sent to Google. Your preference is stored in your browser's local storage as aispendops_cookie_consent.
Management Portal (dashboard.aispendops.com)
The management portal uses the following cookies for authentication and session management:
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
| __auth_token | Encrypted authentication session | Strictly necessary | Session / 24 hours |
| __auth_refresh | Encrypted refresh token for session renewal | Strictly necessary | 7 days |
| __auth_cv | PKCE code verifier during OAuth login flow | Strictly necessary | 10 minutes |
| __auth_state | CSRF state parameter during OAuth login flow | Strictly necessary | 10 minutes |
All cookies are HttpOnly and Secure (only transmitted over HTTPS). They are first-party cookies set by our domain only.
3. Local Storage
The management portal uses browser local storage for:
| Key | Purpose |
|---|---|
| aispendops_active_tenant | Remembers your last selected company so you don't need to re-select it each visit |
4. Third-Party Cookies
Google Analytics: if you accept analytics cookies, Google may set cookies on our domain to measure website usage. Data is processed by Google in accordance with their privacy policy. We use Google Analytics 4, which does not store IP addresses.
Cloudflare Turnstile: provides bot detection for our marketing chatbot ("Amy"). The script is loaded only when you open the chat widget. See the marketing-site cookie table above for the cookies it sets, and Cloudflare's privacy policy for further details.
Auth0: our authentication provider may set cookies on their own domain during the login flow. These are governed by Auth0's cookie policy and are not accessible to us.
5. Consent
Strictly necessary cookies (authentication and session cookies on the management portal) do not require consent under the EU ePrivacy Directive, UK PECR, or equivalent legislation.
Analytics cookies (Google Analytics on the marketing website) require your consent before being set. A cookie banner is shown on your first visit. You can accept or decline, and your choice is remembered.
To change your preference, clear your browser's local storage for this site or use your browser's developer tools to remove the aispendops_cookie_consent key. The consent banner will reappear on your next visit.
6. Managing Cookies
You can control and delete cookies through your browser settings. However, if you block our strictly necessary cookies, the management portal will not function correctly, and you will not be able to sign in.
For more information on managing cookies in your browser, visit allaboutcookies.org.
7. Changes
We may update this Cookie Policy from time to time. Changes will be posted on this page with an updated effective date.
Contact
Questions about cookies? Please contact us through our contact form.