1What we store#
Cookies:
- Auth hint cookie (
auth_hint) — a flag set to1that tells the app you have a session, so it can attempt a silent refresh. Contains no personal data. Kept for 7 days or until you sign out. - Refresh-token cookie (
refresh_token) — an httpOnly, Secure, SameSite=Strict cookie sent only to the refresh endpoint of our API, used only to renew your session. Valid for 7 days or until you sign out. - Sign-in security cookies (
oauth_nonce,calendar_oauth_nonce,enrichment_oauth_nonce) — httpOnly, Secure cookies that last 10 minutes. They are set only while you sign in with Google or Microsoft or connect a calendar or CRM, and they stop a forged return from the provider.
Session storage (cleared when you close the tab):
aoe_session— your short-lived access token and basic profile (name, email, plan), so you stay signed in within a tab. It expires after 15 minutes and is renewed silently.aoe_next,aoe_expired— one-time flags that return you to the page you wanted after signing in, and tell you if your session ended.
Local storage (stays until you clear it):
aoe_cookie_notice_ack— that you dismissed the cookie notice.aoe_privacy_optout— your "Do Not Sell or Share" choice on this device.aoe-theme,aoe-sidebar— your light/dark theme and whether the sidebar is collapsed.aoe_last_selection_v2,aoe_bots_seen_at— the bot settings you chose last time and when you last looked at your meetings list.aoe_mic_consent_ack— that you confirmed you will notify people before browser-microphone capture.aoe:done:…— which action items you ticked in a report.
The site language comes from the web address, not from a cookie. When you go to Stripe (checkout, billing portal), Google or Microsoft (sign-in), those companies may set their own cookies on their own pages; see their policies.
2Legal basis#
These are strictly necessary for a service you have requested (to authenticate you, keep you signed in and remember settings you chose), so we treat them as not requiring prior consent under the ePrivacy Directive. Because we set no non-essential cookies, our notice is informational rather than a consent gate. If we ever add optional cookies (e.g. product analytics), we will request opt-in consent first.
3Managing cookies#
You can clear cookies and site storage in your browser settings; doing so will sign you out. Blocking the strictly-necessary cookies will prevent the app from working. Questions: [email protected].