Start free
Cookie policy

LEADARO cookie policy

Last updated: 26 May 2026

This Cookie Policy explains what cookies and similar technologies LEADARO uses on the public website (www.leadaro.ai) and inside the authenticated workspace application. It is a companion to the Privacy Policy; the two documents should be read together.

A cookie is a small text file that a website places on your device when you visit it. Cookies allow the site to recognize your device on subsequent requests so it can keep you signed in, remember preferences, or measure how the site is used. Similar technologies covered by this policy include local storage, session storage, and tracking pixels (1x1 transparent images embedded in pages or emails).

This policy applies to:

  • The public marketing site at leadaro.ai and www.leadaro.ai.
  • The authenticated workspace application served from the same domain under /app.
  • Transactional emails sent from office@thebrandoers.com via our email subprocessor (see below).
  • The embeddable chatbot widget that operators install on their own websites.

Third-party websites linked from LEADARO are governed by their own cookie policies; we do not control or take responsibility for their cookies.

These cookies are required for the site to function and cannot be disabled without breaking core features. They do not require consent under GDPR / ePrivacy because they are necessary to deliver the service you requested.

  • Supabase authentication cookies (sb-*-auth-token and related) — set when an operator signs in to the workspace. They keep the session active across page navigations. First-party, session or up to 7 days depending on the "remember me" choice.
  • CSRF protection tokens — short-lived tokens that prevent cross-site request forgery on authenticated form submissions. First-party, session.
  • Workspace routing cookie — stores the currently selected workspace ID when an operator belongs to multiple workspaces. First-party, persistent (1 year).

Preference cookies remember choices you make so the platform behaves the way you configured it on subsequent visits. They are first-party and do not track you across other websites.

  • Locale cookie (leadaro_locale) — stores your selected language on the public site (RO or EN). Persistent, 1 year.
  • UI preference cookies — store collapsed/expanded sidebar state, table column ordering, and other in-app layout choices inside the workspace. Persistent, 1 year.

The public marketing site does not currently run third-party analytics cookies (no Google Analytics, no Hotjar, no Mixpanel, no PostHog) on the public surface. We rely on Vercel's first-party request-level metrics, which do not set cookies on your device.

Inside the authenticated workspace, server-side application logs capture feature-usage events tied to your authenticated user ID; these logs are server records, not browser cookies, and are retained for 90 days for operational monitoring (see Privacy Policy).

The public marketing site may set advertising and conversion-measurement cookies only when the operator running the LEADARO demo workspace has connected a Meta Pixel or a Google Ads Tag through the Integrations area. When enabled, those tags are loaded from Meta / Google and may set the following:

  • Meta Pixel (_fbp, fr) — set by connect.facebook.net when the demo workspace has connected a Pixel ID. Used for ad attribution and lookalike audiences. Persistent, up to 90 days. Subject to Meta's data policy.
  • Google Ads / GA4 Tag (_ga, _gid, _gcl_au) — set by googletagmanager.com / google-analytics.com when the demo workspace has connected a Tag ID. Used for conversion attribution. Persistent, up to 24 months. Subject to Google's privacy policy.

These tags fire only on the public marketing pages — never inside the authenticated workspace, never on the chatbot widget loaded on operator websites.

Transactional emails sent through Postmark may contain a tracking pixel that Postmark uses to record opens and link clicks for the operator's reporting view. You can disable image loading in your email client to block the pixel; the email itself will still arrive and read correctly without it. Postmark's policy is at postmarkapp.com/privacy-policy.

Embedded video or social-media widgets, if used on a future marketing page, will be flagged inline with their cookie behavior at the point of embed. As of the last-updated date above, no such embeds are present on the public site.

You can control or block cookies through:

  • Your browser settings — every major browser (Chrome, Firefox, Safari, Edge) lets you block all cookies, block third-party cookies only, or delete existing cookies. Note that blocking strictly necessary cookies will sign you out of the workspace.
  • Browser privacy modes — incognito / private windows do not persist cookies between sessions.
  • Opt-out tools for advertising cookies — youronlinechoices.com (EU), aboutads.info (US Digital Advertising Alliance).
  • Google Ads settings — adssettings.google.com.
  • Meta ad preferences — facebook.com/ads/preferences.

We may update this Cookie Policy when the platform evolves or when new subprocessors are introduced. Material changes will be reflected in the last-updated date at the top of this page. If you have an account, we will also notify you by email when the change is material.

Questions about cookies or this policy should be sent to office@thebrandoers.com. We respond within 5 business days.