Cookie Notice
In one line
We use only the cookies the site needs to work. If we ever add optional cookies, we will ask first, and "No" will be as easy as "Yes".
The short version
This short version helps you understand the full text. Read the full text for the complete terms.
- Today qypu.ai uses only strictly necessary cookies: sign-in, security, and load balancing. (Full text, section 2)
- We use no advertising cookies, no cross-site tracking, and no third-party analytics cookies. (Section 3)
- If we add optional cookies later, we will ask before setting them. Accept and Reject will look the same, and you can change your mind at any time. (Section 4)
- We treat Global Privacy Control signals as an opt-out. (Section 5)
Full text
Read the full text (about 1 minute)
1. What cookies are
Cookies are small files a website stores in your browser. Similar tools include local storage and pixels. This notice covers all of them.
2. Cookies we use now
| Name (or pattern) | Set by | Purpose | Lasts |
|---|---|---|---|
| wos-session (pattern) | qypu (WorkOS AuthKit) | Keeps you signed in to app.qypu.ai | Session, up to [DURATION] |
| CF_Authorization | Cloudflare Access | Staff-only admin sign-in; never set for customers | Up to 8 hours |
| __cf_bm, cf_clearance | Cloudflare | Bot protection and security | 30 minutes to 1 year |
| Sentry session data | Sentry | Error reports on app.qypu.ai (no cross-site tracking) | Session |
[COOKIE TABLE — engineering to confirm each name and duration from the live site before publication.]
3. Cookies we do not use
We do not use advertising, retargeting, social media pixels, or cross-site tracking cookies on qypu.ai or app.qypu.ai.
4. If we add optional cookies
Before we set any non-essential cookie, we will show a choice with equal "Accept" and "Reject" buttons, list each cookie here, and record your choice. You can change it at any time from the footer link "Cookie settings".
5. Global Privacy Control and Do Not Track
We treat a Global Privacy Control signal as a valid opt-out of sale, sharing, and targeted advertising where the law gives it that effect. Browsers' "Do Not Track" setting has no agreed standard; because we do no tracking, it changes nothing.
6. Contact
Questions: [CONTACT EMAIL].
Change log
- 2026-10-10 · 0.1.0 · First draft for counsel review.
Open questions for counsel
We publish these while the page is a draft, so you can see what is not settled yet.
- Confirm the cookie inventory from the live deployment (WorkOS cookie names and lifetimes, Cloudflare bot cookies).
- ePrivacy and PECR: strictly necessary exemption covers the cookies listed; the UK Data (Use and Access) Act 2025 adds new exemptions for some analytics, but we do not rely on them.
Useful for: Business owners, IT and security reviewers. To save this page as a PDF, use your browser's Print command. Back to the trust centre.