Most of the cookies below are necessary to sign you in or to remember a setting you chose. One is not: Google Analytics, which counts visits. It is not set at all unless you accept the banner, and you can change your mind from any page.
A cookie is a small file a website asks your browser to store, so that the next request you make can be recognised as coming from you. Similar technologies, such as local storage, work the same way for our purposes and are covered by this policy.
We do not run advertising or retargeting. We do not set cookies that follow you around other websites, we do not upload customer lists to any ad platform, and we do not share cookie data with data brokers or ad networks. Nothing inside a client workspace is measured by analytics.
What we do run is Google Analytics on the public pages, so we can see which of them people actually read. That is the only optional cookie here, and it is the only one worth having an opinion about.
We also do not load it before you say yes. Plenty of sites show a banner while the analytics tag has already run; on this one the tag is not requested from Google at all until consent is given, so declining means nothing was ever sent rather than nothing was stored.
| Cookie | What it does | Type | How long it lasts |
|---|---|---|---|
| sb-<project>-auth-token | Keeps you signed in to the client workspace. Set only after you sign in. | Strictly necessary | Until you sign out, or the session expires |
| theme | Remembers whether you chose the light or dark appearance. | Preference | 1 year |
| lang | Remembers the language you selected. | Preference | Until the browser is closed |
| sidebar_state | Remembers whether the workspace sidebar was expanded or collapsed. | Preference | 7 days |
| last-selected-team | Returns you to the client workspace you were last working in. | Preference | 30 days |
| fsa-analytics-consent | Remembers whether you accepted or declined analytics, so you are not asked on every page. Set by the banner, never before you answer it. | Strictly necessary | 12 months |
| _ga and _ga_<property> | Set by Google Analytics to count visits and tell a returning visitor from a new one. Only set if you accept, and deleted if you later decline. | Analytics, and optional | Up to 2 years |
| __cf_bm and related Cloudflare cookies | Set by Cloudflare to tell human visitors from automated traffic and to protect forms from abuse. | Strictly necessary | Up to 30 minutes for bot management; longer for security challenges |
On a first visit only the Cloudflare security cookies are set. The analytics ones appear only if you accept, the consent cookie only once you answer either way, and the rest once you sign in to a client workspace or change a setting.
We do not control the cookies those companies set, and their own policies govern them.
Analytics. Use the Cookie settings link in the footer of any page. It forgets your previous answer, deletes the analytics cookies, and shows you the choice again. Withdrawing is one click, the same as accepting was, which is the standard we hold ourselves to whether or not anybody is checking.
If you would rather not rely on us at all, Google’s opt-out browser add-on, your browser’s cookie settings, or a browser that blocks analytics by default will all do the job. None of them affects your ability to use this site or the workspace.
Preferences. Blocking these is harmless. The site will simply forget your appearance and language choices between visits.
Sign-in. Blocking this will stop the client workspace working, because there is no way to keep you signed in without it. The public pages will continue to work normally.
If we add or remove a cookie, this table changes and the effective date at the top moves with it. Because the list is generated from what the code actually sets rather than from a template, it should not drift out of date.
Questions about cookies or anything else in the privacy policy: privacy@futurestateadvisors.com. This policy is published by Future State Advisors, LLC.