Legal

Cookie Policy

Last updated November 2, 2026

Every cookie Ayebridge sets, what it does and how long it lasts.

1. What cookies are

Cookies are small text files that a website stores in your browser and reads back on later visits. This policy lists every cookie that Ayebridge, operated by Sianipar Consults LLC, sets on ayebridge.com, on portal subdomains and on customers’ custom portal domains, and why. We do not store anything else in your browser’s local storage for tracking.

2. Essential cookies

These cookies are strictly necessary to sign you in and keep your session secure. They are first-party, are not used for advertising or tracking, and are not shared with anyone. Because they are essential, they do not need consent.

Essential cookies
Cookie	Purpose	Duration	Type
`ab.session_token`	Keeps you signed in to the app or a client portal and ties requests to your session.	30 days, renewed while you use the Service; ends when you sign out. On a customer's custom portal domain, at most 7 days.	Essential, first-party, HttpOnly
`ab.session_data`	A signed, short-lived copy of your session details so pages load without a database lookup each time.	5 minutes	Essential, first-party, HttpOnly
`ab.dont_remember`	Set when you sign in without choosing to stay signed in, so the session ends when you close the browser.	Browser session	Essential, first-party, HttpOnly
`ab.two_factor`	Links the password step and the code step of sign-in when two-factor authentication is on.	10 minutes	Essential, first-party, HttpOnly
`ab.trust_device`	Set only if you choose to trust a device during two-factor sign-in, so you are not asked for a code there again.	30 days	Essential, first-party, HttpOnly
`ab_ws`	Remembers which workspace you last opened, if you belong to more than one.	12 months	Essential, first-party, HttpOnly

On ayebridge.com, the sign-in cookies carry the __Secure- prefix, which means browsers send them only over HTTPS. They may be shared with Ayebridge portal subdomains so you stay signed in there.

3. Privacy preference cookies

Two first-party cookies let us show the right privacy notice and remember your choice. They contain no personal details and are never used for advertising. The page reads them, so they are not HttpOnly.

Privacy preference cookies
Cookie	Purpose	Duration	Type
`ab_geo`	Your broad region, one of `gdpr` (EEA, UK or Switzerland), `us` or `other`, so we show the right notice and default. It is worked out from the country our host, Vercel, derives from your IP address. We do not store your IP address for this.	24 hours	Essential, first-party
`ab_consent`	Your analytics choice: `analytics` or `essential`. Set only when you make a choice in the banner or on Your Privacy Choices.	12 months	Preference, first-party

4. Analytics without cookies

We count page views with Vercel Web Analytics. It sets no cookies and stores nothing in your browser. It records the page, referrer, country, browser, operating system and device type, in aggregate, and recognizes a visit by a hash of the request that is discarded after 24 hours. It does not follow you across other websites.

EEA, UK and Switzerland: analytics run only if you choose “Allow analytics”.
United States: analytics are on by default, and you can opt out on Your Privacy Choices.
Elsewhere: analytics are on by default, and you can switch them off on the same page.

A Global Privacy Control signal from your browser switches analytics off, unless you later allow them yourself.

5. Stripe checkout and customer portal

When you subscribe or manage billing, you are taken to checkout and customer portal pages hosted by Stripe on Stripe’s own domains. Stripe sets its own cookies there, for example to prevent fraud and keep payments secure. Those cookies are controlled by Stripe and described in the Stripe Privacy Policy (opens in a new tab). We do not load Stripe scripts on our own pages.