Cookie Policy
Last updated: 21 October 2026
1. What are cookies?
Cookies are small text files. AAA Sentinel also uses browser localStorage for preferences that are not sent on every HTTP request. This policy covers both.
2. Cookies we use
Essential storage (always on)
Required to sign you in and remember UI preferences. Does not require consent. These are not tracking cookies.
| Key | Purpose | Duration |
|---|---|---|
CognitoIdentityServiceProvider.* | Authentication session (Amazon Cognito / Amplify, localStorage) | 1 hour (refresh 30 days) |
aaa_cookie_consent | Your banner choice (localStorage, not an HTTP cookie) | Until you delete it |
finops_ui_lang | UI language (localStorage) | Until you delete it |
Analytics
On the public pages we use PostHog (EU region) to count visits, where they come from, clicks on calls to action, waitlist sign-ups and contact form submissions. It runs in cookieless mode: it stores no cookies and nothing in your browser storage, and each visitor is counted with an identifier that PostHog computes on its servers and renews every day, without following you from one day to the next or across sites. It also receives technical data (browser, operating system, screen size and language) and your IP address, which it only uses to compute the daily identifier and does not store: it does not derive your location. URLs are sent without tokens or emails. Nothing is sent from the application or the console, and we do not use Google Analytics or advertising pixels. If your browser sends Do Not Track or Global Privacy Control we do not measure you; you can also object by writing to compliance@aaa-sentinel.com.
Third-party cookies
Stripe may set cookies necessary for secure payment processing (fraud prevention). These cookies are governed by Stripe's privacy policy. On the sign-up, password recovery, waitlist and contact pages we load Google reCAPTCHA to check that whoever uses them is not a bot. Google may set its own cookies (for example _GRECAPTCHA) and analyse technical browser data for that security purpose only; it is not loaded anywhere else on the site. It is strictly necessary for the security of the sign-up or recovery you request, so it does not depend on your banner choice. It is governed by Google's Privacy Policy and Terms of Service.
3. Consent management
When you first visit our website, we show you a cookie banner where you can:
- Accept all: stores your preference; today it does not turn on extra trackers.
- Essential only: same product behavior, with the preference stored as essential.
You can change your preference at any time with “Cookie settings” in the footer, or by clearing this site’s storage in the browser. We also persist <code>finops_selected_account</code> and <code>finops_selected_client</code> for the signed-in UI. During the session we also use <code>sessionStorage</code>, which is cleared when you close the tab, for technical data: the secure sign-in step (PKCE), the page to return to after signing in, interface caches and whether you hid the trial notice today.
4. How to disable cookies in your browser
You can configure your browser to reject cookies or warn you before accepting them:
- Chrome: Settings → Privacy and security → Cookies and other site data.
- Firefox: Settings → Privacy & Security → Cookies and Site Data.
- Safari: Preferences → Privacy → Manage Website Data.
- Edge: Settings → Cookies and site permissions → Cookies and site data.
Note that disabling essential cookies may prevent the Platform from functioning correctly.
5. Changes to this policy
We will update this policy when we modify the cookies used. The last update date is shown at the top of the document.
6. Contact
For any queries about cookies: compliance@aaa-sentinel.com