Cookie and Browser Storage Notice
1. Website measurement and advertising
The public website uses Google Analytics for site measurement and the X advertising base pixel to measure visits from our ads. Both load by default unless Global Privacy Control, Do Not Track, or a saved browser-local opt-out disables them. The authenticated application uses Google Analytics separately. This public website's browser-local opt-out does not control that separate origin. The tags can use cookies and browser signals. Google and X may receive page URLs, referrer information, browser and device information, IP addresses, and cookie or ad-click identifiers. X uses these signals for attribution and advertising optimization under its own privacy practices. PersonaStack does not send account email addresses, phone numbers, or private agent content to the X pixel.
There is no cookie prompt or cookie settings page. Use the single Delete tracking cookies and disable tracking button at the beginning of the Privacy Policy to stop both public website tags in this browser. Global Privacy Control and Do Not Track are honored automatically, including when no saved preference exists. Opting out does not affect sign-in or essential product storage.
The first-party Local Storage key personastack.tracking-opt-out stores disabled until you clear site storage. An earlier saved declined advertising preference is also honored. Policy updates do not reset a saved opt-out. If storage cannot be read, tracking stays off. If an opt-out cannot be saved, the button reports that failure and disables tracking for the current page without claiming a saved preference. The button clears accessible Google Analytics and X tracking cookies for this website and reloads if vendor code is already running. It does not erase data already sent to Google or X or remove cookies inaccessible to this website. Browser settings and the vendors' own privacy controls manage their separate storage and retained data.
2. Essential cookies
| Name and host | Purpose and type | Lifetime |
|---|---|---|
ps_session on my.personastack.ai | HttpOnly, first-party session cookie. Keeps the authenticated browser signed in. Essential. | Up to 30 days, bounded by the upstream session expiry. Removed on logout or invalidation. |
ps_login_redirect on my.personastack.ai | HttpOnly, first-party return-target cookie. Restores a safe local page after sign-in. Essential. | 10 minutes or until consumed. |
ps_google_account_challenge on my.personastack.ai | HttpOnly, first-party OAuth challenge cookie. Binds a Google sign-in or link response to the initiating browser. Essential when Google sign-in is used. | 10 minutes or until consumed. |
3. Browser-only convenience storage
| Key or prefix | Purpose | Lifetime |
|---|---|---|
personastack.persona-chat-dock.v1* | Local Storage. Remembers chat dock ordering and open or minimized presentation. It is not the authoritative chat session or transcript. | Until cleared by the user, account scope changes, or product cleanup. |
personastack.persona-chat-transcript.v1:* | Local Storage. Browser convenience copies of visible chat presentation. Server state remains authoritative. | Bounded by product cleanup and session lifecycle. |
personastack.console-log-retention:* | Local Storage. Restores bounded console lines after reload. | Expires after 6 hours without an accepted rendered-line change. |
ps-sidebar-collapsed | Local Storage. Remembers authenticated navigation presentation. | Until changed or browser storage is cleared. |
| Setup coordination and notification keys. | Session or Local Storage. Carries bounded UI-only setup coordination and one-time feedback. It is not credential authority. | Session-only, consumed after the flow, or removed by bounded setup cleanup. |
4. Controls
Browser settings can clear cookies and storage. Blocking essential cookies prevents sign-in and OAuth protection from working. The authenticated product will provide a preference surface before any optional cookie or analytics purpose is enabled.
Document record
This version is preserved at /legal/cookies/2026-09-30-r12/. See the change history. Content hash: sha256:ef1ff36919b106525762414147fd20c217a4f4ee4a856d6da5f9aac16a9465b7.