This Cookie Policy explains how Porter ("we", "us", "our") uses cookies and similar tracking technologies when you use our visitor management platform ("Service"). Please also refer to our Privacy Policy for full details on how we process personal data.
1. What Are Cookies
Cookies are small text files that are stored on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites work more efficiently, to provide a better user experience, and to supply information to the owners of the site.
2. Cookies We Use
Porter uses cookies that fall into the following categories:
- Essential cookies: required for authentication, session management, and security. The Service cannot function properly without these.
- Preference cookies: store your settings and display preferences (e.g. theme, language, dashboard layout).
- Analytics cookies: help us understand how the Service is used so we can improve performance and user experience.
- Third-party cookies: set by our trusted partners for payment processing and usage analytics.
3. Essential Cookies
These cookies are strictly necessary for the operation of the Service. They include:
| Cookie Name | Purpose | Duration |
|---|---|---|
| access_token | JWT access token for authenticating your session. Sent with each request to verify your identity. | 15 minutes |
| refresh_token | Used to obtain a new access token when the current one expires, without requiring you to log in again. | 7 days |
| preferences | Stores your user interface preferences such as theme selection, dashboard layout, and notification settings. | 1 year |
The access_token and refresh_token cookies are HTTP-only and secure, meaning they cannot be accessed by client-side JavaScript and are only transmitted over encrypted HTTPS connections.
4. Analytics Cookies
We use PostHog for product analytics to understand how users interact with the Service. PostHog may set the following cookies:
| Cookie Name | Purpose | Duration |
|---|---|---|
| ph_phc_* | PostHog analytics identifier. Tracks anonymous usage patterns such as page views, feature adoption, and session duration. | 1 year |
Analytics data is used solely to improve the Service and is not shared with advertisers or used for ad targeting.
5. Third-Party Cookies
The following third-party services may set cookies when you use certain features of the Service:
- Stripe (payment processing): Stripe sets cookies to process payments securely, detect fraud, and comply with regulatory requirements. These cookies are essential when you interact with payment forms (e.g. subscribing, updating billing details). For details, see Stripe's Cookie Policy.
- PostHog (product analytics): PostHog sets cookies to track anonymous usage patterns and help us understand how the Service is used. PostHog is configured to respect Do Not Track signals. For details, see PostHog's Privacy Policy.
6. Cookie Duration
Cookies used by Porter have the following lifespans:
- Session cookies: the access token (JWT) expires after 15 minutes and is automatically refreshed if you remain active.
- Persistent cookies: the refresh token lasts 7 days from your last login. After 7 days of inactivity, you will need to log in again.
- Preference cookies: last for 1 year or until you clear them.
- Analytics cookies: PostHog cookies last up to 1 year.
7. Managing and Disabling Cookies
You can control and manage cookies in several ways:
- Browser settings: most browsers allow you to block or delete cookies through their settings or preferences menu. Consult your browser's help documentation for instructions specific to your browser (Chrome, Firefox, Safari, Edge).
- Do Not Track: if your browser sends a Do Not Track signal, PostHog analytics will not track your activity.
- Logging out: signing out of Porter will clear your access token and refresh token cookies.
Please note: if you disable essential cookies (access_token and refresh_token), you will not be able to log in to or use the Service. The Service requires these cookies to authenticate your identity and maintain your session.
8. GDPR Compliance
Porter is committed to full compliance with the General Data Protection Regulation (GDPR) and the Privacy and Electronic Communications Regulations (PECR) with respect to cookies:
- Essential cookies are set under the "strictly necessary" exemption and do not require consent, as they are required for the Service to function.
- Analytics and third-party cookies are only activated with your consent, in line with GDPR Article 6(1)(a) and PECR Regulation 6.
- You have the right to withdraw consent at any time by adjusting your browser settings or contacting us.
- Cookie data processed by Porter is handled in accordance with our Privacy Policy, which details your full data protection rights including the right of access, rectification, erasure, and data portability.
9. Changes to This Policy
We may update this Cookie Policy from time to time. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.
10. Contact Information
If you have questions about this Cookie Policy or how we use cookies, please contact us:
- Data Protection Officer: [email protected]
- General support: [email protected]
- Postal address: Business Automation Ltd, Suite 4, The Innovation Centre, Leeds, LS1 4AP, United Kingdom