Cookie Policy
Deputise Ltd
Last updated: 17 October 2026
1. Scope
This policy covers the cookies and browser storage that the Deputise website and web app use, and the analytics that runs with and without them. We set no advertising cookies, track nobody across other sites, and never use your data for marketing.
2. Cookies and storage we use
Essential
These are needed to sign you in, keep your account secure and remember your cookie choice. They cannot be switched off from the banner.
| Name | Purpose | Lasts |
|---|---|---|
__Secure-better-auth.session_token |
Keeps you signed in | 30 days, or until you sign out |
__Secure-better-auth.session_data |
A short-lived signed copy of your session so that pages load without a database lookup | 5 minutes |
deputise_cookie_consent |
Remembers your answer to the cookie banner | 1 year |
deputise_cookie_consent_awaiting_account |
Carries an answer you gave while signed out to your account when you next sign in | 1 year |
| Sign-in state cookie | Protects a sign-in with Google against forgery, only where that option is offered and you use it | 5 minutes |
The registration form loads Cloudflare Turnstile, which checks that a browser is not a bot. Cloudflare, which hosts the Service, may also set its own short-lived security cookies. Your browser's local storage holds your theme choice, and session storage holds a message you were writing until it is sent.
Analytics
Analytics is provided by PostHog, hosted in the EU. It records the pages you open and when, the clicks, changes and form submissions you make, events the product raises for its own features (such as a chat starting or a question being escalated), and page performance measurements. Each interaction is recorded as the kind of interaction it was and the address of the page it happened on. The text on and around the control is removed before the event leaves your browser, so your messages, the titles drawn from them and the instructions an owner wrote for an assistant are never part of it.
If you choose Allow cookies, PostHog stores the following:
| Name | Purpose | Lasts |
|---|---|---|
ph_phc_..._posthog (cookie and local storage) |
Recognises the same browser on a later visit and groups events into a session | 1 year |
__ph_opt_in_out_... (local storage) |
Records that you allowed analytics cookies | Until cleared |
ph_..._session_... (session storage) |
Properties of the current visit | Until the tab closes |
When you are signed in and have allowed cookies, events are recorded under your account ID. No name or email address is attached to them.
Crash reports
When the site fails in your browser we record the error, where in our code it happened and the page you were on, so that we can repair it. Crash reports go to the same provider as analytics and are sent whichever choice you make in the banner, under our legitimate interest in keeping the Service working. With Allow cookies, a report carries the same identifier as the rest of analytics: your account ID when signed in, otherwise the analytics cookie's ID. With Essential only, or before you answer, it carries no identifier and sets no cookie.
Session replay
We do not use session replay. No recording is made of your screen or of what you type.
3. Your choices
When you first visit, the banner offers:
- Essential only
- Allow cookies
Essential only stops the cookies, not the measurement. Analytics runs without a cookie, without anything kept in your browser's storage, without a session identifier and without a name, so nothing in it ties to your account and nothing lets us recognise you on a later visit. Where our provider counts such visits, it does so from the request itself, such as the address it came from and the browser that made it, as a value that cannot be turned back into either and that it replaces daily. The site behaves the same way before you answer the banner.
Allow cookies lets analytics keep a cookie, recognise the same browser on a later visit and, when you are signed in, record what you do under your account.
Your answer is stored in a cookie for a year and, when you are signed in, on your account, so that it follows you between devices. The most recent answer, on any device, is the one that applies.
If your browser or an extension sends a Global Privacy Control signal, we take it as Essential only and do not show you the banner. An answer you give yourself overrides the signal, in either direction.
4. Changing your choice
Select Cookie preferences in the site footer, or in your account menu when signed in, to reopen the banner and answer again. Choosing Essential only after having allowed cookies removes the analytics cookie and storage. You can also clear cookies in your browser, after which the banner asks again.
5. Legal basis
Under the Privacy and Electronic Communications Regulations and the UK GDPR, and the equivalent EU rules, analytics cookies and recording your activity under your account rest on your consent, which you can withdraw at any time as described in section 4. The cookieless, anonymous measurement that continues without consent falls within the exception for statistical purposes, and together with crash reports rests on our legitimate interest in understanding whether the Service works and keeping it working. You can object to that processing by writing to privacy@deputise.ai. Essential cookies need no consent because the Service cannot work without them.
6. Changes
We will update this policy and the date at the top when the cookies we use change.
7. Contact
Questions about cookies or privacy: privacy@deputise.ai