Legal
Cookies and storage
Last updated 4 October 2026. What the website and the app keep in your browser, why, and for how long. Optional analytics run only if you accept them.
Your choices
We group what we keep in your browser like this.
- Strictly necessary, always on: signing in, keeping your account secure, bot checks on forms, and remembering your cookie choice. The site and app cannot work without them, so they do not need your consent.
- Preferences, in the app only: settings you choose, such as dark mode or column widths. They are kept only when you change the setting, because you asked for it, and only in your browser.
- Analytics, off until you choose "Accept analytics": limited usage events and browser error reports in PostHog (EU hosting), sent through our own proxy. Website events use a temporary identifier held in memory; app events can include internal user and organisation identifiers and are pseudonymous rather than anonymous. PostHog sets no cookies and does not persist its analytics identifier in browser storage. Operational errors from our API are separate security and reliability records, described in the privacy policy.
The first time you visit, a bar at the bottom of the page asks for your choice, with "Accept analytics", "Reject" and "Manage" as equal options. If your browser sends Global Privacy Control or Do Not Track, we treat that as "Reject", do not show the bar and do not ask again; you can still turn analytics on yourself in cookie settings, and that choice then applies in this browser. Your choice is kept in this browser only and is never sent to us. We ask again when we change what this page describes.
In the app, change it from the bar or under Settings > Security. See the privacy policy for how we use the data.
On this website (www.scoutsentinel.com)
| Name | Type | Purpose | Lasts | Category |
|---|---|---|---|---|
scoutsentinel.analytics | Local storage | Your cookie choice: accepted or rejected, when, and the version of this page you answered | Until you clear site data | Strictly necessary |
| Cloudflare Turnstile | Set by Cloudflare in its own frame (challenges.cloudflare.com) | Tells people from bots on the waitlist and sign-up forms. We set nothing for it; anything it keeps is Cloudflare's, for this check | Set by Cloudflare | Strictly necessary |
In the app (app.scoutsentinel.com)
Cookies set by our API are shared by scoutsentinel.com and its subdomains (staging.scoutsentinel.com on staging) so the app and the API see the same sign-in. Cookies set by the app apply to app.scoutsentinel.com only.
| Name | Type | Purpose | Lasts | Category |
|---|---|---|---|---|
ss_session | Cookie (HttpOnly), set by the API | Keeps you signed in | Until you close the browser, or 30 days from your last visit if you choose to stay signed in (never more than 90 days) | Strictly necessary |
ss_csrf | Cookie, set by the API and refreshed by the app | Protects your actions against cross-site request forgery | 90 days as set by the API, 12 hours when the app refreshes it; cleared when you sign out | Strictly necessary |
ss_mfa | Cookie (HttpOnly), set by the API or the app | Carries a pending second-factor check after signing in | 5 minutes (API) or 10 minutes (app) | Strictly necessary |
__Secure-ss_oauth, __Secure-ss_sso | Cookie (HttpOnly), set by the API | Protects a sign-in with Google, Microsoft, GitHub or single sign-on against forgery | 10 minutes | Strictly necessary |
__Secure-ss_verify | Cookie (HttpOnly), set by the API | Checks that the browser confirming your email address is the one that asked | 24 hours | Strictly necessary |
scoutsentinel.analytics | Local storage | Your cookie choice in the app (the app asks separately from the website) | Until you clear site data | Strictly necessary |
ss_theme | Cookie, set by the app | Remembers light or dark mode, when you choose one | 1 year | Preferences |
ss.asset-map.view | Local storage | Remembers whether you view assets as a map or a list | Until you clear site data | Preferences |
scoutsentinel:table-columns:… | Local storage | Remembers the column widths you set in tables | Until you clear site data | Preferences |
ss.icon-picker.recent | Local storage | Remembers the icons you picked recently | Until you clear site data | Preferences |
scoutsentinel:onboarding:… | Local storage | Remembers whether you hid the getting-started card or finished the tour | Until you clear site data | Preferences |
Browsers keep storage separately for each site, so the app asks for your analytics choice once, separately from this website. There are no advertising cookies anywhere.
On our staging sites
On staging, the website, the app and the administration site sit behind Cloudflare Access; in production only the administration site does, for our staff. Access sets CF_Authorization (strictly necessary: it proves you are allowed in) for the session length Access is configured with.
Questions
Email privacy@scoutsentinel.com.