Cookie Notice
Published on 2026-10-17
1. Storage on visits
The website and application load PostHog analytics and Conversations, Google Ads tags and advertising attribution on page load for every visitor, without a cookie consent banner. These services can store and access cookies, local storage and session storage when you visit. Authentication storage is used when Clerk initializes or you sign in. The so_adclick cookie is written when a supported advertising click identifier is present in the landing URL.
The inventory below describes website and application storage. Browser settings, supplier responses and the features used can affect which entries appear. Storage expiry is separate from retention of information already sent to a provider.
2. Storage inventory
| Storage | Provider | Purpose | Duration |
|---|---|---|---|
| ph_so_www_analytics cookie | PostHog | Website analytics identifier; host-only cookie | Up to 90 days; refreshed during use. |
| ph_<project>_posthog cookie and local storage | PostHog | Application analytics identifier, device and usage properties | Cookie: up to 365 days, refreshed during use. Local storage: until cleared. |
| ph_so_www_analytics and ph_<project>_posthog session storage; ph_so_www_analytics_window_id, ph_so_www_analytics_primary_window_exists, ph_<project>_window_id and ph_<project>_primary_window_exists | PostHog | Analytics session and tab coordination on the website and application | Browser session; replaced or cleared as tabs and sessions change. |
| ph_conv_<project> local storage | PostHog | Support conversation continuity and widget state on the website and application | Until cleared from browser storage. |
| so_adclick cookie | ShinobiOps | Advertising click identifier and landing time, captured from gclid, gbraid or wbraid on the website and application; host-only | Up to 90 days; replaced by a later advertising click. |
| _gcl_au cookie and _gcl_ls local storage | Google Ads | Advertising conversion measurement and tag state on the website and application | Cookie: up to 90 days, refreshed during use. Local storage: until cleared. |
| _gcl_aw and GCL_AW_P cookies | Google Ads | Advertising click attribution; _gcl_aw on the website domain, GCL_AW_P on Google, DoubleClick and Google Ad Services domains | Up to 90 days in the verified tag configuration, refreshed during use. Browser settings can block third-party storage. |
| __client, __client_uat and __client_uat_* cookies | Clerk | Authentication client and session state on website and application visits | Up to 400 days in the verified browser configuration, refreshed during use; browsers and provider settings can shorten this. |
| __clerk_environment local storage | Clerk | Cached authentication environment and configuration on website and application visits | Until cleared from browser storage. |
| __cf_bm and _cfuvid on the Clerk domain | Clerk delivery infrastructure | Bot protection and request-rate security for authentication delivery | __cf_bm: up to 30 minutes, refreshed during use. _cfuvid: browser session. |
| __session and other Clerk authentication storage created during sign-in | Clerk | Authenticated sessions and session renewal | According to Clerk session settings and the sign-in method used. See https://clerk.com/docs/guides/how-clerk-works/cookies. |
3. Browser controls
You can block or delete cookies and clear local or session storage in your browser. Blocking authentication storage may prevent signing in or using account features. Deleting browser storage does not erase information already received by a provider. See /privacy/ for rights to object and request erasure.
4. More information
See /privacy/ for processing purposes, recipients, international transfers, retention and rights. Contact contact@shinobiops.ai with questions.