Cookie Policy

Last updated October 4, 2026

Summary

This summary is for convenience only. The text below governs.

This Cookie Policy forms part of the Privacy Policy. It describes the cookies and comparable browser storage that Planless Inc., operating as Cortad ("Company"), uses on cortad.com and within the Service, and the choices available to visitors and Customers.

1. Categories

1.1 Strictly necessary. Storage without which the Service cannot provide what is requested: signing in, preventing forged sign-in responses, bot verification at account creation, and remembering choices made under this Policy. Strictly necessary storage does not require consent and cannot be switched off without disabling the related function.

1.2 Analytics. A pseudonymous identifier and event records used to measure how the website and the Service are used. Analytics is placed only with consent where applicable law requires consent, and may be declined or withdrawn at any time.

1.3 No storage described in this Policy is used for advertising or shared with an advertising network.

2. Items

2.1 __Host-bl_session: an HttpOnly, Secure, host-only cookie holding the signed-in session, valid for up to seven days. Strictly necessary.

2.2 A verification cookie set by Company's bot-verification provider during account creation, retained as that provider configures. Strictly necessary.

2.3 bl.privacy.v1 and bl.privacy.dismissed in local storage: the choice made under this Policy, the Policy version, and whether the notice was dismissed, until cleared or replaced. Strictly necessary.

2.4 bl.auth.pending in session storage: a single-use value for the duration of a sign-in attempt that prevents replay of a sign-in response. Strictly necessary.

2.5 bl.analytics.session in session storage and bl.anon.v1 in local storage: pseudonymous identifiers that group analytics events by visit and by browser. Analytics.

2.6 bl.utm.v1 in session storage: campaign parameters from the link that brought the visitor, for the duration of the visit. Analytics.

2.7 Storage placed by Company's analytics provider when analytics is enabled, which measures page views and performance and keeps a playback of how a page was used, on Company's behalf, and does not use the data for its own purposes. Analytics.

3. What analytics records

Analytics records the page or screen viewed, a named feature interaction, page load timing, scroll depth and active time, the referring page's origin, campaign parameters, and a coarse device, browser, language, time zone and viewport category. It never records the content of a form field, source code, prompt or conversation text, or a credential.

Analytics also keeps a playback of how a page was used: where the pointer moved, what was pressed, how far the page was scrolled, and the shape of the page it happened on. Words are hidden in the browser before the playback leaves it, so the playback shows where someone was and what they reached for, never what they read or typed. Sections that carry account details are left out of it altogether. The playback follows the same choice as the rest of analytics and is kept for the same period.

4. Choices

4.1 A visitor may accept or decline analytics when first asked, and may change that choice at any time with the Cookie preferences control at the bottom of every page.

4.2 In the European Economic Area, the United Kingdom and Switzerland, analytics starts only after the visitor accepts it. Elsewhere, a visitor who remains on the home page after the notice is shown, without declining, is treated as accepting analytics, and may decline at any time.

4.3 Company treats a Global Privacy Control signal as declining analytics and any sale or sharing of personal information. "Do Not Track" is not honored separately.

4.4 Declining analytics does not affect strictly necessary storage or the use of the Service. Clearing site data in the browser removes recorded choices and signs the visitor out.

5. Changes

Company may revise this Policy by posting a revised version at this address with a new date.

6. Contact

Planless Inc., operating as Cortad. [email protected].