Cookie Policy
Version 2.0 · Effective October 14, 2026 · Previous versions: 1.0 (October 14, 2026 – October 14, 2026)
addSynapse uses only the cookies and browser storage that are strictly necessary for what you ask our sites to do. We use no analytics, advertising or tracking cookies, so no consent is needed for them. This list comes from inspecting our sites, not from a template.
1. Public website (addsynapse.com)
- Our pages set no cookies, with one exception: the contact page, which needs a session and a form-protection cookie.
- If you close the cookie notice, your browser remembers it in local storage (key “addsynapse_cookie_ok”). It is never sent to our servers.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| addsynapse_session | Cookie (first party, HttpOnly) | Session of the contact form | 2 hours |
| XSRF-TOKEN | Cookie (first party) | Protection against forged requests on the contact form | 2 hours |
| addsynapse_cookie_ok | Local storage | Remembers that you closed the cookie notice | Until you clear your browser data |
2. Your dashboard (app.addsynapse.com)
These keep you signed in and protect your actions. “Remember me” is optional: the remember_web_* cookie is set only if you tick the box when you sign in.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| addsynapse_app_session | Cookie (first party, HttpOnly) | Signed-in session | 120 minutes without activity |
| XSRF-TOKEN | Cookie (first party) | Protection against forged requests | 120 minutes |
| remember_web_* | Cookie (first party, HttpOnly) | Keeps you signed in — only if you tick “Remember me” | 400 days, or until you sign out |
| addsynapse-assistant:selection:* | Session storage | The items you selected in an assistant conversation, kept across a reload | Until you close the tab |
| addsynapse_assistant_mapping_dismissed_* | Session storage | Remembers that you hid a suggestion card | Until you close the tab |
| addsynapseAssistantSpeechLang:* | Local storage | The language you chose for voice input — only if you use voice input | Until you clear your browser data |
3. Staff area (admin.addsynapse.com)
Used only by addSynapse staff.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| addsynapse_staff_session | Cookie (first party, HttpOnly) | Signed-in session of staff | 120 minutes without activity, at most 12 hours |
| XSRF-TOKEN | Cookie (first party) | Protection against forged requests | 2 hours |
| addsynapse_staff_device | Cookie (first party, HttpOnly, encrypted) | Remembers a trusted device after a staff member’s two-factor code | 48 hours |
4. API (api.addsynapse.com)
Our plugins and connected AI assistants use signed requests or access tokens, not cookies. If you open an api. address in a browser, you are sent to the dashboard and may receive the session and XSRF-TOKEN cookies described above.
5. Third parties
- The public website loads no third-party scripts, fonts or trackers.
- We use no third-party font services. The dashboard and the staff area use the Inter font, which is served from our own servers, so no font provider receives your IP address.
- Stripe’s scripts are not loaded on our pages. Payments and the billing portal open on Stripe’s own pages (checkout.stripe.com, billing.stripe.com), which have their own cookie policy. Signing in with Google or GitHub happens on their pages.
6. The Sales Agent on shops
If a shop uses our Sales Agent chat, the chat stores the conversation in the shopper’s browser (local storage, or session storage if the shop chooses; key “salesagent:*”) so it survives a page change. A conversation older than 2 hours is not resumed. This storage belongs to the shop’s site, and the shop lists it in its own cookie policy.
7. How to control them
You can delete or block cookies and storage in your browser settings. Without the essential cookies you cannot sign in or send the contact form. Signing out deletes the “Remember me” cookie.