Cookie Policy

Eight cookies, listed by name. One is optional, and you choose it.

Effective 10 August 2026

Most of the cookies below are necessary to sign you in or to remember a setting you chose. One is not: Google Analytics, which counts visits. It is not set at all unless you accept the banner, and you can change your mind from any page.

What cookies are

A cookie is a small file a website asks your browser to store, so that the next request you make can be recognised as coming from you. Similar technologies, such as local storage, work the same way for our purposes and are covered by this policy.

What we do not do

We do not run advertising or retargeting. We do not set cookies that follow you around other websites, we do not upload customer lists to any ad platform, and we do not share cookie data with data brokers or ad networks. Nothing inside a client workspace is measured by analytics.

What we do run is Google Analytics on the public pages, so we can see which of them people actually read. That is the only optional cookie here, and it is the only one worth having an opinion about.

We also do not load it before you say yes. Plenty of sites show a banner while the analytics tag has already run; on this one the tag is not requested from Google at all until consent is given, so declining means nothing was ever sent rather than nothing was stored.

What we do set

sb-<project>-auth-token
What it doesKeeps you signed in to the client workspace. Set only after you sign in.
TypeStrictly necessary
How long it lastsUntil you sign out, or the session expires
theme
What it doesRemembers whether you chose the light or dark appearance.
TypePreference
How long it lasts1 year
lang
What it doesRemembers the language you selected.
TypePreference
How long it lastsUntil the browser is closed
sidebar_state
What it doesRemembers whether the workspace sidebar was expanded or collapsed.
TypePreference
How long it lasts7 days
last-selected-team
What it doesReturns you to the client workspace you were last working in.
TypePreference
How long it lasts30 days
fsa-analytics-consent
What it doesRemembers whether you accepted or declined analytics, so you are not asked on every page. Set by the banner, never before you answer it.
TypeStrictly necessary
How long it lasts12 months
_ga and _ga_<property>
What it doesSet by Google Analytics to count visits and tell a returning visitor from a new one. Only set if you accept, and deleted if you later decline.
TypeAnalytics, and optional
How long it lastsUp to 2 years
__cf_bm and related Cloudflare cookies
What it doesSet by Cloudflare to tell human visitors from automated traffic and to protect forms from abuse.
TypeStrictly necessary
How long it lastsUp to 30 minutes for bot management; longer for security challenges

On a first visit only the Cloudflare security cookies are set. The analytics ones appear only if you accept, the consent cookie only once you answer either way, and the rest once you sign in to a client workspace or change a setting.

Cookies set by other companies

  • If you click through to book a call, our scheduling provider sets its own cookies on its own domain, under its own policy.
  • If you pay by card, the payment page is operated by Stripe, which sets cookies necessary to process the payment and to prevent fraud.
  • Cloudflare, which serves this site, sets cookies to distinguish human visitors from automated traffic and to protect forms from abuse.

We do not control the cookies those companies set, and their own policies govern them.

Changing your mind

Analytics. Use the Cookie settings link in the footer of any page. It forgets your previous answer, deletes the analytics cookies, and shows you the choice again. Withdrawing is one click, the same as accepting was, which is the standard we hold ourselves to whether or not anybody is checking.

If you would rather not rely on us at all, Google’s opt-out browser add-on, your browser’s cookie settings, or a browser that blocks analytics by default will all do the job. None of them affects your ability to use this site or the workspace.

Preferences. Blocking these is harmless. The site will simply forget your appearance and language choices between visits.

Sign-in. Blocking this will stop the client workspace working, because there is no way to keep you signed in without it. The public pages will continue to work normally.

Changes to this policy

If we add or remove a cookie, this table changes and the effective date at the top moves with it. Because the list is generated from what the code actually sets rather than from a template, it should not drift out of date.

Contact

Questions about cookies or anything else in the privacy policy: privacy@futurestateadvisors.com. This policy is published by Future State Advisors, LLC.