Cookies and local storage
ActiveTwin stores only what it needs to work and to keep you signed in. The public site counts visits without cookies, and there is no advertising tracking, so there is nothing to accept or decline.
1. In short
A cookie, or an entry in your browser's local storage, is a small piece of data the site keeps in your browser. We use only those that are strictly necessary for a service you asked for. The law does not require consent for them, so we do not show a cookie banner. We have no advertising or social media trackers, and the visit statistics of the public site set no cookies (section 5).
2. Cookies
| Name | Set by | Purpose | Lasts |
|---|---|---|---|
at_refresh_token |
the ActiveTwin API | keeps you signed in. It cannot be read by scripts, is sent only to the sign-in endpoints and only over HTTPS | until you sign out, or 30 days |
at_queues |
the ActiveTwin API | administrators only: opens the job queue dashboard | 1 hour |
3. Local storage
| Key | Purpose | Lasts |
|---|---|---|
theme |
your choice of light or dark mode, shared by the site and the app | until you clear it |
auth_session_hint |
remembers that this browser was signed in, so a visitor who never signed in is not sent to the sign-in check | until you sign out |
activetwin.tokensLowDismissed (session storage) |
remembers that you closed the notice about your AI tokens running low, for the current period | until you close the tab |
Your sign-in token is kept only in the page's memory and disappears when you close the tab.
4. Bot protection
The account forms (sign-up, sign-in, password reset and resending the activation link) use Cloudflare Turnstile to tell people from bots. It runs a check in your browser and processes your IP address and browser signals to do so. This is necessary to protect accounts, and is described in the privacy policy.
5. Visit statistics
The public site (not the app) counts its visits with Umami, run on our own server. It sets no cookies and stores nothing in your browser. For each page view it records the page, the site you came from, your browser, operating system, device type, screen size, language and country. Your IP address is used only to work out the country and is not stored; visits are grouped by a value that changes every month, so you cannot be followed over time or across sites.
6. Error reports
When the app hits an error, it sends a technical report to our error tracker. It sets no cookies, and the report carries no content and no email address.
7. Changes
If we ever want to use a cookie that is not strictly necessary, we will ask for your consent first and update this page.
Questions: [email protected].