Source: https://asterly.co/cookies

The boring bits

# Cookie Policy

This marketing site sets no application cookies and runs no analytics or advertising trackers in the inspected version. There is no consent banner because there are no optional trackers to accept. Signing into the separate app uses an essential session cookie.

Last updated: 25 October 2026

Draft · not yet reviewed by a lawyer

On this page

1.  [On the marketing site](https://asterly.co/cookies#section-1)
2.  [In the app and extension](https://asterly.co/cookies#section-2)
3.  [Why there is no banner](https://asterly.co/cookies#section-3)

## On the marketing site

The code for asterly.co does not set cookies or use localStorage, sessionStorage, tracking pixels or an analytics SDK. Fonts are served through the site’s build rather than a runtime font tracking script. The waitlist’s hash/domain log is server-side processing, not a cookie, and is explained in our [Privacy Policy](https://asterly.co/privacy).

Vercel still processes network requests and operational logs. Preview protection or infrastructure controls can behave differently from application code. We have not verified every host dashboard setting; a change introducing optional tracking must be reviewed before release.

## In the app and extension

The app uses `asterly_session` to keep you signed in for up to 30 days. It is an HttpOnly cookie with SameSite=Lax and Secure in production. It is needed for the sign-in service you request, not advertising. Signing out expires it and removes the server session.

The Chrome extension uses local extension storage for the app connection token, workspace/settings and capture state, and IndexedDB for screenshot drafts. This is browser storage, not a marketing tracker. Discard a draft or disconnect the extension to remove the corresponding local data; clearing browser storage is also possible. These actions do not erase uploaded guides.

## Why there is no banner

There is no optional tracking code to block or switch on in this site version. We therefore show no consent banner and create no consent-preference cookie. If analytics, advertising, non-essential storage or embeds are added, they must remain blocked until valid consent where required, with an equally easy reject option and a way to withdraw. This rule is a release requirement; an analytics consent system has not been implemented.

You can clear or block cookies in your browser; blocking the app’s essential cookie prevents sign-in. Privacy questions go to [hello@asterly.co](mailto:hello@asterly.co). For the legal distinction, see the [ICO guidance on cookies and similar technologies](https://ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guide-to-pecr/cookies-and-similar-technologies/).

## All the boring bits

-   [Privacy Policy](https://asterly.co/privacy)
-   [Terms of Service](https://asterly.co/terms)
-   [Cookie Policy](https://asterly.co/cookies)
-   [AI Use & Data](https://asterly.co/ai-data)
-   [Subprocessors](https://asterly.co/subprocessors)
-   [Security](https://asterly.co/security)
-   [Acceptable Use](https://asterly.co/acceptable-use)
-   [Data deletion & contact](https://asterly.co/data-deletion)
-   [DPA template (draft)](https://asterly.co/dpa)