Version 2026-08-21 — effective as of September 1, 2026
This Policy explains what cookies and similar technologies are, which ones we use on trakto.studio, on Trakto Links and on our other websites, what for, and how you can manage them. It supplements the Privacy Policy.
1. What cookies and similar technologies are
1.1. Cookies are small text files that a website stores in your browser to remember information between pages and visits. They may be session cookies (deleted when you close the browser) or persistent cookies (kept for a set period). They may be first-party (set by Trakto) or third-party (set by another company, such as an analytics tool).
1.2. Similar technologies include localStorage, sessionStorage and IndexedDB (browser storage used by the editor to work offline and keep drafts), pixels and tags (small pieces of code that record that a page or e-mail was opened) and third-party SDKs. In this Policy, "cookies" covers all of them.
2. Categories we use
2.1. Strictly necessary (always active)
Essential for the Platform to work. They cannot be disabled because without them you cannot sign in, edit or pay. Legal basis: performance of a contract / legitimate interest; they do not require consent.
| Name / type | Vendor | Purpose | Duration |
|---|---|---|---|
| Authentication session (SSO) trakto-sso | Trakto | Keep you signed in across the editor, the hub and Trakto's websites | Session / up to 30 days |
| CSRF token and security preferences | Trakto | Protect forms and requests against forgery | Session |
| Cookie consent preferences | Trakto | Remember your choices in this banner | 12 months |
| Language and interface preferences | Trakto | Remember language, theme and editor layout | 12 months |
| Editor local storage (IndexedDB / localStorage) | Trakto | Store drafts, font and asset cache, editor state for performance and recovery | Until cleared by the user |
Stripe cookies (__stripe_mid, __stripe_sid) | Stripe | Fraud prevention and checkout operation | 12 months / 30 min |
| Liveblocks cookies | Liveblocks | Maintain the real-time collaboration session | Session |
| Load balancing and infrastructure protection | Google Cloud | Routing and protection against abuse | Session |
2.2. Analytics and performance (with consent where required)
They help us understand how the Platform is used, which features matter, where people get stuck and how performance behaves. The data is used in aggregated and pseudonymized form whenever possible.
| Name / type | Vendor | Purpose | Duration |
|---|---|---|---|
ph_* | PostHog | Product analytics, funnels, session recording with text and content masking enabled, with all text inputs masked and only with consent | 12 months |
mp_* | Mixpanel | Product and retention analytics | 12 months |
ga, _ga*, _gid | Google Analytics 4 | Website analytics (traffic, source, pages) | 14 months / 24 h |
| Sentry cookies USA; SDK only, no cookies | Sentry | Associate errors with sessions for diagnostics | Session |
| Trakto Links metrics | Trakto | Count views and interactions on published links (truncated IP) | Session / 24 h |
2.3. Marketing (always with consent)
They allow us to measure campaigns and show more relevant Trakto ads on other platforms. They are only activated if you accept.
| Name / type | Vendor | Purpose | Duration |
|---|---|---|---|
| Pixels and identification cookies in e-mails | Customer.io | Measure opens and clicks in marketing e-mails; personalize communications | 12 months |
| no advertising pixels active at this time | Conversion measurement and remarketing audiences | ||
| Attribution parameters (UTM) | Trakto | Know which campaign you came from | 30 days |
3. How we ask for consent
3.1. Opt-in (prior consent): if you access from the European Union, the United Kingdom, Canada or another region where the law requires it, analytics and marketing cookies remain off until you accept them in the banner. Declining is as easy as accepting, and the banner does not prevent use of the website.
3.2. Opt-out: in other regions (including Brazil, the other countries of Latin America and the United States), analytics cookies may be active by default on the basis of legitimate interest, with a notice on first access and the option to disable them at any time. Marketing cookies always depend on acceptance.
3.3. California and other US states: we honor the Global Privacy Control (GPC) signal and the "Do Not Sell or Share My Personal Information" link in the footer, which disables third-party marketing cookies.
3.4. We record your choices (date, banner version, categories) for 5 years to demonstrate compliance.
4. How to manage cookies
4.1. In Trakto's settings. Click "Cookie preferences" in the footer of any page or go to Settings → Privacy within the Platform to enable or disable categories at any time.
4.2. In your browser. You can block or delete cookies in your browser settings. Keep in mind that blocking strictly necessary cookies will prevent sign-in and editing. Instructions: Chrome, Firefox, Safari, Edge.
4.3. Opt-out directly with the vendors. Google Analytics: opt-out browser add-on. Google personalized ads: adssettings.google.com. For other advertising platforms, use each platform's preference pages or industry initiatives such as youronlinechoices.eu and optout.aboutads.info.
4.4. Browser signals. We honor GPC. We do not respond to "Do Not Track" signals, which have no established standard, except where the law requires it.
5. Cookies on Trakto Links and embedded content
5.1. When you visit a Trakto Link, we use only strictly necessary cookies and view metrics with truncated IP. The user who published the link may have embedded third-party content (videos, forms, maps) that sets its own cookies, governed by those third parties' policies.
5.2. If you embed a Trakto Link on your website, it is your responsibility to inform your visitors about Trakto's cookies under this Policy and to obtain the required consent.
6. Changes
We may update this Policy when we change tools or when the law requires it. The cookie table is reviewed periodically. Material changes will be communicated at least 15 days in advance or, for new non-essential cookies, through a new consent request.
7. Contact
Questions about cookies and privacy: dpo@trakto.io
Version history
| Version | Effective | Summary of changes |
|---|---|---|
| 2026-08-21 | 2026-09-01 | Initial version: necessary/analytics/marketing categories, tools (PostHog, Mixpanel, GA4, Customer.io, Stripe, Liveblocks, Sentry), opt-in regime (EU/UK/CA) and opt-out (elsewhere), GPC, management. |