Cookies & browser storage

Necessary application cookies

__Host-cd_oauth keeps the WorkOS AuthKit sign-in request tied to the browser for up to 10 minutes. __Host-cd_session authenticates the signed-in CompanyDelta session for no longer than one hour. __Host-cd_checkout connects an anonymous checkout return to its pending workspace for up to seven days. __Host-cd_conversation links the homepage assistant conversation to this browser for up to 30 days; after sign-in, the saved conversation also requires its owning account. These cookies are Secure, HttpOnly, SameSite=Lax and restricted to the CompanyDelta origin.

WorkOS, Stripe, OpenAI Sites and Cloudflare may use their own cookies when their pages or infrastructure provide authentication, checkout, hosting and security. Their cookie names and lifetimes are controlled by those services.

Workspace browser storage

The workspace uses local storage named cd-workspace to remember the selected workspace identifier. It is not a password or API credential and remains until you clear the site’s stored data. Clearing it resets the selection without deleting server records.

Optional analytics storage

cd-analytics-consent stores your choice of “Allow analytics” or “Essential only” in local storage. When you allow analytics, __Host-cd_attribution is a Secure, HttpOnly, SameSite=Lax first-party cookie that links consented acquisition and conversion events for up to 90 days. A short-lived session-storage flag prevents the same pricing-page view from being counted repeatedly in one browser session.

After you choose “Allow analytics,” the public website also loads Google Analytics 4. Google Analytics may set first-party cookies whose names begin with _ga; CompanyDelta limits their configured lifetime to 90 days. It receives page paths and titles, referrer and campaign context, standard browser or device signals, approximate location, and enabled interaction events such as scrolls, outbound clicks, downloads, video engagement and form starts or submissions. CompanyDelta does not send form values, assistant question text, answers, enquiry messages, account details or provider payloads to Google Analytics. Advertising storage, advertising user data and ad personalisation remain disabled.

Choosing “Essential only” prevents the Google Analytics tag from loading and leaves optional analytics cookies unset. Use “Privacy choices” in the website footer to change your selection; withdrawing consent deletes CompanyDelta’s linked attribution and event rows, disables Google Analytics and attempts to remove its first-party cookies from this site. CompanyDelta does not use advertising tags or session replay.

Your controls

You can inspect, block or clear cookies, local storage and session storage in your browser’s site-data settings. Clearing authentication data signs you out; blocking necessary sign-in or checkout storage may prevent those flows from completing. Use “Privacy choices” in the website footer to change the optional analytics setting without clearing necessary storage.

For server-stored information and privacy requests, read the privacy notice or email the privacy team.