Cookie Policy
Last updated September 30, 2026
1. Introduction
This Cookie Policy explains what cintram.com stores in your browser, what Cintram measures about visits to the website, how the rules differ by region, and how you can change your choices at any time. It also covers the Cintram app and client portal, which use only what is needed to keep you signed in. For how we handle personal data more generally, please read our Privacy Policy.
Cintram measures its own website itself. We do not use Google Analytics, advertising pixels, tag managers, or any third-party analytics or advertising service on cintram.com. Adding one would first require a new legal review and an update to this policy.
2. What Are Cookies?
Cookies are small text files a website places in your browser. Websites can also keep information in your browser’s local storage. In this policy, “cookies” covers both.
3. What cintram.com Stores
| Name | Purpose | Category | Lifetime |
|---|---|---|---|
| cintram_consent_production | Remembers your choice, or that you opted out | Strictly necessary | 12 months |
| cintram_journey_production | An opaque browser-journey identifier, set only when measurement is permitted | Analytics | 13 months from when it is set, never extended |
| cintram_consent_pending_production | Holds a choice to reduce measurement that we could not record yet, so it can be recorded on your next visit. It contains the journey identifier it applies to, and nothing that names you | Strictly necessary | Until recorded, at most 30 days, and never longer than the journey cookie |
All three are first-party cookies. Page scripts cannot read them (HttpOnly), they are sent only over secure connections (Secure, SameSite=Lax), and none is shared with the Cintram app or any other domain.
The website also keeps one preference in your browser’s local storage, cintram-theme, only when you choose light or dark mode. It holds no identifier and is never sent to us.
4. The Cintram App and Client Portal
When you sign in to the Cintram app or a client portal, your browser keeps what is needed to keep you signed in and your account secure. These are strictly necessary and cannot be turned off through the website’s cookie choices; blocking them in your browser will stop sign-in from working. The app and portal do not use analytics or advertising cookies.
5. How Website Measurement Works
- A browser journey, not a person. When measurement is permitted, we record which pages this browser viewed and how it first arrived: the campaign tags in the link (UTM values); the site that linked to us, as its address only, never the page or search terms; and an advertising click identifier, only if you allow marketing. One person on two browsers is two journeys.
- First captured touch. We record the first visit we were allowed to measure. That is not necessarily how you first heard of Cintram.
- Signing up. When you choose “Start free trial”, the link to our app always carries a signed note of which page you came from, which identifies nobody. If measurement was permitted, it also carries a one-time token that links the new account to this browser journey. The token travels in the part of the address that browsers do not send to servers, and the link is made only after you verify your email address.
- No IP address, no fingerprinting. We do not store your IP address in our measurement records, and we do not fingerprint your device.
- Location is used, not kept. Your approximate location (your country) is used at the moment of your visit to decide which of the rules below applies, and is then discarded. We record which rule applied, never where you are, and location never appears in our measurement records, links, or logs. The rule we record can still imply a broad group of regions.
6. Which Rule Applies
| Where you are | What happens |
|---|---|
| The EU and EEA, the United Kingdom, Switzerland, Canada, and anywhere we cannot tell | We ask first. Nothing is collected until you choose, and “Reject all” is as easy as “Accept all”; analytics and marketing both stay off until you turn them on. We cannot tell Canadian provinces apart, so every visitor from Canada gets the rule Quebec requires. |
| The United States and its territories | Measurement is on by default, with no banner. “Your privacy choices” in the footer lets you opt out at any time, and the opt-out takes effect immediately and stays in place. A browser Global Privacy Control signal is treated as an opt-out. We do not use this measurement to profile sensitive characteristics. |
Under the ask-first rule, Global Privacy Control turns marketing off and leaves analytics off until you choose.
7. Your Choices
7.1 Changing Your Choice
Use “Cookie preferences” or “Your privacy choices” in the footer of any page to change your choice at any time. Where we rely on your consent, withdrawing it does not affect measurement that was lawful before you withdrew.
7.2 Rejecting, Withdrawing, and Opting Out
- Rejecting before anything is collected creates no journey, and nothing about the visit is kept.
- Withdrawing or opting out ends your browser journey. Measurement stops at once and the journey cookie is removed. We delete the journey’s recorded pages, visits, campaign tags, click identifiers, and its link to any account it led to; deletion completes within 24 hours. Your account, workspace, trial, subscription and payment records are kept, because they are how we provide the service; they simply no longer record how you arrived. We keep a minimal record that you made the choice (which rule applied, what you chose, and when, with no location), and a one-way marker that stops a delayed or restored copy of the journey from coming back. Backups are not edited, but a deleted journey is never restored into active use: the marker is reapplied after any restore.
- If our service is briefly unavailable when you reduce what we may measure, your choice takes effect on your device at once, and we record it the next time you visit while the service is available. If you do not return within 30 days, we never learn of the choice, so the journey is not deleted early: it is removed when it reaches its normal retention limit in section 9. Measurement on your device stays off either way.
7.3 Browser Settings
Most browsers let you block or delete cookies. Blocking the strictly necessary ones may stop parts of Cintram from working. Cintram does not respond to “Do Not Track”, which has no agreed standard, but it does honor Global Privacy Control as described in section 6.
8. Embedded Videos and Images from Other Sites
Some articles may embed a video (YouTube or Cloudflare Stream) or show an image hosted by another site. Nothing is loaded from that site until you click to load it. The placeholder names the site first. Once loaded, that site’s own privacy policy applies to what it receives.
9. How Long We Keep Measurement Data
| Record | Kept for |
|---|---|
| Journeys, page views, visits, and the signup and billing events linked to them | 14 months |
| Your consent choices | 25 months |
| Counts with no identifier (page requests, link clicks, service health) | 25 months |
| Anonymous totals of at least five people, journeys or workspaces | Indefinitely |
10. Logs We Do Not Control
Our hosting provider, Cloudflare, processes each request to cintram.com, including your IP address and the full page address (campaign tags included), to deliver and protect the site, under Cloudflare’s own privacy policy. Cintram does not receive or store Cloudflare’s per-request logs; we see only aggregated traffic statistics. If we later add a load balancer or another provider that keeps request logs, we will set them to the shortest retention available, limit access to Cintram operators, and update this policy.
11. Changes to This Cookie Policy
We will update this policy when what cintram.com stores or measures changes, and revise the date above. Adding any third-party analytics or advertising service would come with an updated policy first.
12. Contact Us
Questions about this policy, and privacy requests, go to [email protected]. A request deletes the signup and billing measurement records linked to your account, and a permanent one-way marker keeps them from being linked again. See section 17 of our Privacy Policy for our privacy contact.