Cookie & storage policy

Effective:
21 September 2026
Next review:
21 March 2027
Owner:
Dom Cowen ([email protected])

This page lists every cookie and browser-storage key Vantage actually sets — not a generic list of what a site “might” use. It was built by tracing the application’s source code directly; see our privacy policy for how this data fits into the bigger picture.

Cookies

Vantage sets the sign-in session cookie, and — only if your organisation uses enterprise SSO — a short-lived cookie for the sign-in redirect below. We do not set, and have found no evidence in our code of, any analytics, advertising, or marketing cookie.

CookieTypePurposeDuration
Session cookie (Better Auth)NecessaryKeeps you signed in and lets the app tell whether a request is authenticated.Session-lived; cleared on logout or session revoke.
SSO state cookie (Better Auth)Necessary (enterprise SSO only)Holds the sign-in handshake's state/nonce while you're redirected to your organisation's identity provider and back, so the return trip can be verified. Only set if your organisation uses enterprise SSO.Cleared automatically once the sign-in redirect completes.

Both cookies are strictly necessary for the service to work, so neither is gated behind the consent control below — withholding the session cookie would mean you couldn’t stay signed in, and withholding the SSO state cookie would mean you couldn’t complete an enterprise sign-in redirect.

Browser storage (localStorage / sessionStorage)

Vantage also stores a small number of first-party values directly in your browser (not sent to any third party):

KeyStoragePurposeType
vantage-themelocalStorageRemembers your light/dark/system theme choice.Necessary
vantage-app-themelocalStorageRemembers which app theme you picked (Dusk Route, Blue Hour or Contour).Necessary
vantage-site-modelocalStorageRemembers the light/dark choice you made on the marketing site.Necessary
vantage.portal.tokenlocalStorageAnonymous identifier so a public feedback portal can de-duplicate your votes.Necessary (portal feature)
vantage.portal.email / vantage.portal.namelocalStorageRemembers the email/name you gave when you first submitted or voted on a portal.Necessary (portal feature)
vantage:share-attempt-idlocalStorageRate-limits passcode attempts on a shared link, to slow down guessing.Necessary (security)
vantage:share-grant:<token>sessionStorageRemembers a shared link's passcode was already entered this browser session.Necessary
usage:touched:<workspace>:<module>sessionStorageFirst-party record of which area of the app you've opened this session, sent only to Vantage's own backend.Necessary (product feature)
Various UI-state keys (coach-mark and onboarding-card dismissal, platform-operator workflow continuity)localStorageRemembers a one-time prompt was dismissed, or resumes an in-progress workflow after a redirect.Necessary
vantage.consent.decisionlocalStorageRemembers the choice you made in the cookie preferences banner below, so you're not asked again.Necessary (records your consent choice itself)
vantage.helpLocalelocalStorageRemembers your preferred language for the in-app help content.Necessary
workspace-hard-delete:<orgId>:<workspaceId>sessionStorageTracks progress through the multi-step confirmation for permanently deleting a workspace, so it survives a page refresh mid-confirmation.Necessary (security)

Optional processing

Vantage doesn’t currently use any optional analytics, personalisation, or marketing cookie/storage. If we ever add one, it will not run until you’ve accepted it through the consent control available from this marketing site’s footer (“Cookie preferences”) — accepting and rejecting carry equal weight, and you can change your choice at any time. Public feedback-portal and shared-link pages don’t currently carry this control themselves; they only ever write the necessary portal/share storage listed above, never anything optional.

Managing storage yourself

You can clear cookies and site data for Vantage at any time from your browser’s settings; this will sign you out and reset the preferences above.