Cookies

In short

Leadscape sets cookies only so you can sign in to the portal and stay signed in. Each one is strictly necessary: without it, signing in would not work. Reading the website without signing in sets none at all.

There are no advertising, analytics or tracking cookies, and nothing here follows you across other sites.

The cookies Leadscape sets

Each one belongs to Leadscape’s own site. On the live site every name starts with __Secure-, so your browser sends it only over an encrypted connection, and scripts on a page cannot read any of them.

When you sign in

__Secure-better-auth.session_token

Keeps you signed in. It holds a random key for your session, signed so nobody can forge it, and never your password. It lasts 7 days from when you sign in, and then you sign in again. Signing out deletes it sooner.

__Secure-better-auth.two_factor

Only if you use two-step verification: while you sign in, it links the code you type to the password you just entered. It lasts 10 minutes, and Leadscape deletes it as soon as it accepts your code.

When Leadscape staff give support

Leadscape staff can view a client’s portal as that client to help them, and Leadscape records every action they take there. When they start, their browser gets 2 more cookies.

__Secure-better-auth.admin_session

Keeps the staff member’s own sign-in while they view the client’s portal, so they can return to it. Stopping deletes it, and it never lasts more than 7 days.

__Secure-better-auth.dont_remember

Leadscape sets it at the same time, so the visit ends when their browser closes. It lasts until then, and the visit itself ends after an hour in any case.

What your browser keeps

Your browser keeps 2 settings in its own storage instead of in cookies. It never sends that storage with a request, so Leadscape never receives them.

theme

Nothing sets it any more. The portal used to keep your choice of light, dark or match device here. It is dark only now and ignores any choice stored before; clearing your browser’s site data removes it.

leadscape-cookie-notice

The date you pressed Okay on the cookie notice, so the notice stays away for a year. The notice itself sets no cookie.

What Leadscape does not use

No advertising cookies, no analytics, no Meta Pixel, and nothing that follows you from site to site.

The home page and the privacy, cookie and accessibility pages load nothing from other companies: the fonts, the pictures and the code all come from Leadscape’s own site. Inside the portal, the pictures of your ads load straight from Meta, where your ads live, so Meta sees those requests as it sees any picture it serves.

If this ever changes

If Leadscape ever wants to set a cookie that signing in does not need, such as one for analytics, it will ask you first, and saying no will be as easy as saying yes. It will set nothing until you choose.

Clearing cookies

Your browser’s settings let you see and delete the cookies and site data any website keeps; deleting Leadscape’s signs you out and brings the cookie notice back.

Contact

Questions about cookies go to jonathannave75@gmail.com.