← atrisk.
Get started free

Legal

Cookie Policy

How atrisk.dev and app.atrisk.dev use cookies and similar storage technologies. Read with our Privacy Policy.

Last updated: September 9, 2026 · Effective: September 9, 2026

1. Scope

This Cookie Policy explains cookies and similar technologies (local storage, session storage, pixels where used) on atrisk.dev and app.atrisk.dev. It supplements our Privacy Policy.

2. What are cookies and similar technologies?

Cookies are small text files stored on your device. Similar technologies include local storage and session storage. We use them to keep you signed in, remember limited preferences, secure the Services, and (where enabled) measure product usage.

3. Categories we use

3.1 Strictly necessary / functional

  • Session and authentication storage needed to keep you signed in
  • Pending scan URL storage across authentication (sessionStorage)
  • Local storage for free-tool email convenience on atrisk.dev
  • Security, rate-limiting, and abuse-prevention mechanisms (including edge/CDN signals)

These are required for core operation. Blocking them may break login or tools.

3.2 Analytics & diagnostics (non-essential where consent is required)

  • PostHog - product analytics and usage events (no session recording in current configuration)
  • Sentry - error monitoring and performance traces (session replay sample rates set to zero; not enabled by default)

We do not use Microsoft Clarity or other marketing-site session-replay / heatmap tools.

3.3 Advertising measurement (non-essential)

  • Reddit Pixel - conversion measurement for Reddit Ads (PageVisit, ViewContent, Lead, SignUp)
  • Optional Reddit Conversions API on the server for the same Lead events (hashed email, IP, user agent, click ID)

The pixel may set identifiers such as _rdt_uuid and read rdt_cid from the landing URL after a Reddit ad click. This is advertising measurement, not required to use the Services.

4. Your choices

  • Browser settings - block or delete cookies and site data
  • Global Privacy Control (GPC) - we skip the Reddit Pixel and Reddit Conversions API when GPC is present
  • Clear local/session storage for atrisk.dev / app.atrisk.dev
  • Unsubscribe from marketing emails via links in those emails (separate from cookies)
  • Email contact@atrisk.dev to object to non-essential analytics or advertising measurement where applicable law allows

Do Not Track / Global Privacy Control: GPC is treated as an opt-out of Reddit advertising measurement sharing. Do Not Track is not a reliable signal and does not change processing by itself. We honor other opt-out requests to the extent required by law.

5. Retention

Session cookies and sessionStorage typically last for the browsing session. Auth/session tokens last according to our auth provider configuration. Free-tool email local storage is convenience-only and can be cleared anytime. Analytics identifiers follow vendor retention defaults subject to our configuration and the Privacy Policy. Reddit pixel identifiers follow Reddit's retention for advertising measurement.

6. Changes

We may update this Cookie Policy when we change technologies. The "Last updated" date on this page will change. Material changes may also be noted in the Privacy Policy.

7. Contact

Contact: contact@atrisk.dev

See also: Privacy· Terms· DPA.

This Cookie Policy is effective as of September 9, 2026. Where consent is required for non-essential analytics or advertising measurement, we will seek it through a banner or similar mechanism when implemented; until then, use browser controls, Global Privacy Control, or email contact@atrisk.dev.