Cookie Policy

We use an error-monitoring service (Sentry) to capture application errors so we can fix them. It is configured to report through a same-origin route and does not set cookies or track you across sites. See our Subprocessors list.

We use a privacy-first analytics service (PostHog, EU-hosted) to understand how the product is used — which pages are visited and which steps people complete, such as creating an integration or exporting a workbook — so we can improve it. It is configured to be cookieless: it sets no cookies and writes nothing to your browser’s storage, does not track you across other sites, and is served first-party through our own domain. It is listed on our Subprocessors page.

Strictly-necessary cookies — those essential to a service you have actively requested, such as keeping you logged in — are exempt from the prior-consent requirement under the ePrivacy Directive and the GDPR. Our analytics is cookieless and stores nothing on your device, so it does not trigger that requirement either (consistent with EU guidance, e.g. the CNIL, on privacy-preserving, cookieless measurement). Since we set no non-essential cookies, no consent banner is required — we would rather not interrupt you with a banner for cookies you cannot opt out of without breaking sign-in.

If we ever introduce cookie-based analytics, cross-site tracking, or advertising — anything that stores or reads non-essential information on your device — we will deploy a consent manager that lets you accept or reject it, and we will update this policy before doing so.

You can clear or block cookies in your browser settings. Note that blocking our session cookie will prevent you from signing in and using the product.

Questions: support@crossary.com.