Cookie notice

Essential cookies

ag_session keeps you signed in. It is an HTTP-only cookie, set to SameSite Lax, and it lasts up to 30 days. The value is a random token. We store only a hash of that token on the server. Without this cookie the dashboard cannot tell who you are. It is strictly necessary for a service you asked for, so it does not wait for the cookie banner.

ag_currency remembers whether you chose GBP, USD or EUR on the pricing page. It is a first-party cookie lasting up to one year, set to SameSite Lax. It is a preference cookie so the price table does not reset on the next visit. It does not track you across other websites.

Consent storage

The key ag_cookie in local storage remembers whether you accepted optional analytics or rejected them. Local storage is not a cookie, but it is the same kind of choice, so we describe it here. The banner appears until you choose. You can change your mind by clearing that storage for altgrade.com and reloading the page, which shows the banner again.

Google Analytics, only after consent

If you press Accept, we load Google Analytics 4. The measurement ID defaults to G-6R6Q6YXMB1. Typical cookies are _ga and _ga_6R6Q6YXMB1. We use them to see which public pages are used, and to record free_scan_started, scan_completed, email_captured, begin_checkout, and sign_up. We do not send your email or the site you scanned. Reject optional and the tag never loads. It also stays off on the dashboard and on private prospect reports.

Google is a processor for that analytics data when it is loaded on our instructions. Details of what we use the data for are in the privacy notice. Rejecting analytics does not block the free scan.

Stripe

Checkout is hosted by Stripe. When you continue to pay, Stripe may set its own cookies on Stripe's domain to keep the payment session secure and to detect fraud. Those cookies are Stripe's. We do not copy them into our application. The card number stays with Stripe.

How to choose

Use the banner to accept optional analytics or to reject them. Essential cookies remain so the product can sign you in and remember currency. Browser controls can also block cookies; if you block ag_session you will need to log in on every visit. Questions go to [email protected].

How long each one lasts

ag_session is a first-party cookie, httpOnly, SameSite=Lax, and it lasts 30 days so you stay signed in. ag_currency is also first-party and SameSite=Lax, and it lasts a year so the pricing page remembers GBP, USD or EUR. The consent choice is stored in local storage under ag_cookie, on this site only.

Google Analytics cookies such as _ga are set only after you choose Accept, and only if a measurement id is configured. If you choose Reject, we do not load the analytics script. Stripe sets its own cookies on Stripe's domain when you pay. We do not use those cookies to advertise to you.

You can clear cookies in the browser and choose again the next time the banner appears. Essential cookies come back when you sign in or pick a currency, because the product needs them. Email [email protected] if you want the account data deleted. That request is covered in the privacy notice.

Questions