Cookies
Cookies & Local Storage
What Strata CRM stores in your browser, why it is there, how long it lasts, and how to remove it.
The short version
Our marketing pages, and our own sign-in, sign-up and affiliate pages, can use two analytics and advertising tools: Google Analytics and the Meta (Facebook) pixel. Neither loads until you choose to allow it on the bar at the foot of the page. Analytics covers Google Analytics; Advertising covers the Meta pixel. Cloudflare Web Analytics also counts page views across the site and stores nothing in your browser. We do not run either of the first two on a shop's customer pages, such as booking pages, lead forms and customer hubs, on password reset and email verification pages, or inside a signed-in workspace, whatever you choose. The rest of what we store is first-party data that makes the product work: keeping you signed in, remembering which plan you chose before you had an account, remembering your cookie choice, noting which ad or link first brought you here, and crediting the right person if you arrived through a referral or affiliate link. None of it is sold.
What we store, and for how long
- Sign-in session: keeps you signed in to your workspace so you are not asked for your password on every page. Lasts until you sign out or the session expires. Strictly necessary; the product cannot work without it.
- Affiliate sign-in session: the equivalent for the separate affiliate dashboard, stored separately. Up to 30 days, or until you sign out.
- Plan choice: if you press “Start free trial” on a specific plan, that choice is remembered so your trial starts on the plan you picked. Cleared as soon as your workspace is created, and it expires with the browser tab.
- Referral credit: if you arrived through an affiliate's link or another shop's referral link (a web address containing ?via=), that code is stored for 90 days so they are credited if you subscribe. It records the code and the date, nothing about you.
- How you found us: the first time you land on our public site we note the campaign tags on the address (the utm_ values an ad or link carries), the outside site that referred you, the first page you saw, and the time. If you allow Analytics it is kept for 90 days. Until you choose, or if you reject, it is kept for this visit only and is gone when you close the tab. Either way it is never written on a shop's customer pages or inside a signed-in workspace, and it is saved with your account if you sign up so we can tell which ads and links work.
- Your cookie choice: what you chose on the bar, and when. Kept for 12 months, then we ask again.
- Workspace preference: which of your businesses you last had open, if you belong to more than one.
- On a shop's booking page: the booking you have in progress, so you can pick up where you left off. It is removed from your browser when you book. The random visit number that counts how the page is used is held only while the page is open; if you leave to pay a deposit, it is kept with your booking in progress until you come back, then removed.
- Workspace settings and working state: inside a signed-in workspace, choices such as your theme, saved views and filters, column and layout preferences, privacy masking, and guides you have dismissed are kept in your browser so the app opens the way you left it. Some, such as your home screen layout, are also saved to your account.
Every cookie and stored item
“Necessary” items make the site or a shop's page work and are always on. “Analytics” and “Advertising” items are set only if you allow that kind on the cookie bar.
| Name | Set by | What it holds | How long | Kind |
|---|---|---|---|---|
| strata_auth (cookie) | Strata | Your sign-in session. Your browser's scripts cannot read it. | 7 days, or until you sign out | Necessary |
| strata_oauth_state (cookie) | Strata | A one-time check that a Google sign-in, Google Calendar or QuickBooks connection you started is the one that comes back | 15 minutes | Necessary |
| strataSessionAuthToken, strataPersistentAuthToken, authToken | Strata | Your sign-in session in the app | Until you sign out, or the tab closes if you did not ask to stay signed in | Necessary |
| strataAffiliateSession | Strata | Your affiliate dashboard sign-in | Up to 30 days, or until you sign out | Necessary |
| strataPlanIntent | Strata | The plan you picked before you had an account | Until your workspace is created, or the tab closes | Necessary |
| strataReferral | Strata | The ?via= code on the link you arrived through, and the date | 90 days | Necessary |
| strata.consent | Strata | Your cookie choice and when you made it | 12 months | Necessary |
| strataAttribution | Strata | Campaign tags on the address you arrived at, the outside site that sent you, your first page and the time | 90 days with Analytics allowed; otherwise this visit only | Analytics (this visit only without it) |
| strata.theme, currentBusinessId, workspace views and layout, strata.activeGuidedMove | Strata, inside a signed-in workspace | Your theme, the business you last had open, saved views and layout, a guided step in progress | Until you clear them; a guided step at most 4 hours, and never past the tab closing | Necessary |
| strata.booking.checkout-draft.v1:<shop> | Strata, on a shop's booking page | A pointer to the booking you have in progress | 24 hours, or until you book | Necessary |
| strata.booking.checkout-pending.v1:<shop> | Strata, on a shop's booking page | What you typed (name, phone, email, car, plate, address, notes) while you pay a deposit on Stripe's page, and the random visit number that counts how the page is used. The visit number also rides the address of the return from the card payment, and the page removes it from the address when it reads it. | Removed when you come back. If you never come back it is ignored after 10 minutes and removed the next time that shop's page opens. The counts of how a booking page is used, made with the visit number, are kept for 400 days. | Necessary |
| strata.leadHandoff.car:<shop> | Strata, on a shop's page | The car you picked, carried to the shop's request form | Until the tab closes | Necessary |
| _ga, _ga_FZ1Q5S0XXM | Google Analytics | A random visitor number and the state of your visit | Up to 2 years | Analytics |
| _fbp, _fbc, lastExternalReferrer, lastExternalReferrerTime | Meta pixel | A random browser number, the ad click that brought you (_fbc, only after a Facebook or Instagram ad), and the last outside site you came from | _fbp and _fbc 90 days; the other two until cleared | Advertising |
What we do not do
- We do not load Google Analytics or the Meta pixel on a shop's customer pages or on any address that carries a person's details. That covers every booking page and short booking link, lead forms, booking requests, customer portals, gift cards, record copies, password resets and email verification, and it covers your signed-in workspace and the onboarding pages. Cloudflare Web Analytics is the exception. It runs on the pages of this site, including shops' customer pages, but not on the screens inside our phone apps, and not on a shop's booking page or lead form while it sits inside the shop's own website. It counts page views and load times, and does not use cookies or browser storage.
- Nothing stored in your browser is sold.
- We do not build profiles of visitors ourselves, and the referral record holds a code and a date, not your identity.
Other companies' tools on this site
- Google Analytics, if you allow Analytics, on our public marketing pages including sign-in and sign-up, to count visits and see which pages bring people in. It sets its own first-party cookies and is subject to Google's privacy policy.
- The Meta (Facebook) pixel, if you allow Advertising, on the same pages, to measure which ads lead to signups. It receives the pages you view and what you do on them, such as opening pricing or starting and finishing a sign-up. This is an advertising pixel, and Meta may use what it collects across its own services. It is subject to Meta's privacy policy.
- Cloudflare Web Analytics, on the pages of this site. Our pages load its script from Cloudflare, so it also runs on shops' customer pages. It does not run on the screens inside our phone apps, or on a shop's booking page or lead form while it sits inside the shop's own website. It measures page performance and view counts, and it does not set cookies or other storage in your browser.
- Cloudflare Turnstile, on forms that need a bot check, such as a shop's lead form. It is there to keep spam off a shop's inbox and is subject to Cloudflare's privacy policy.
- Stripe, when you reach checkout or the billing portal. Those pages are hosted by Stripe and are subject to Stripe's own privacy policy and cookies; they are what allow a payment to be processed and fraud to be detected.
How to clear it
Signing out removes the sign-in sessions. Everything else can be cleared through your browser's normal “clear browsing data” or site-data controls. If you block storage you will be asked to sign in each time, a plan choice or referral credit will not carry over, and no analytics or advertising tool loads, because your choice cannot be remembered. Our marketing pages work without browser storage.
Do we ask for consent
Yes. On our marketing pages and our sign-in, sign-up and affiliate pages, a bar at the foot of the page asks before any analytics or advertising tool loads. You can Accept all, Reject all, or Choose between two kinds: Analytics (Google Analytics) and Advertising (the Meta pixel). Until you choose, neither loads. Your choice is kept in your browser for 12 months, then we ask again, and you can change it at any time with “Your privacy choices” at the foot of our marketing pages. We honor the Global Privacy Control signal as Reject all: if your browser sends it, neither loads and we do not ask. We do not respond to Do Not Track signals, which have no agreed meaning. The bar never appears on a shop's customer pages, where none of these tools run. If you would like us to delete analytics data associated with your visit, or you have a question about any of this, write to support@stratacrm.app.
Questions
This page is part of our Privacy Policy. For questions about either, contact S Solutions LLC, doing business as Strata CRM, at support@stratacrm.app.