Cookie Policy
Last Updated: January 2, 2026
1. What Are Cookies?
Cookies are small text files that are stored on your device (computer, tablet, or mobile phone) when you visit a website. They help websites remember your preferences, keep you logged in, and understand how you use the site.
SprintFlint uses cookies to provide essential functionality, remember your preferences, and analyse how our platform is used.
2. Cookies We Use
2.1 Essential Cookies (Always Active)
These cookies are necessary for SprintFlint to function properly. Without them, you would not be able to use our service. Essential cookies cannot be disabled.
| Cookie Name | Purpose | Duration | Type |
|---|---|---|---|
_sprintflint_session |
Rails session management and CSRF protection. Keeps you logged in and secure. | Session (deleted when browser closes) | HTTP-only, Secure |
remember_account_token |
Devise "Remember Me" functionality. Keeps you logged in for longer periods. | 2 months | Database-backed, Secure |
cookie_consent |
Remembers your cookie preferences (whether you accepted analytics cookies). | 365 days | First-party |
referral_code |
Tracks referral source during signup. Set when you arrive via a referral link. | 30 days | First-party |
sidebar_collapsed |
Remembers whether you've collapsed the sidebar in the authenticated interface. | 365 days | UI preference |
sidebar_menu_* |
Remembers which sidebar menu items are expanded or collapsed (dynamic cookie names). | 365 days | UI preference |
viewed_issue_ids |
Tracks which issues you've recently viewed for search suggestions and quick access. | 30 days | Functionality |
recent_search_queries |
Stores your recent search queries for quick re-searching. | Session | Functionality |
2.2 Analytics Cookies (Require Consent)
These cookies help us understand how users interact with SprintFlint so we can improve the platform. These cookies and tracking scripts are only loaded if you consent via our cookie banner.
Google Analytics
| Cookie Name | Purpose | Duration | Type |
|---|---|---|---|
_ga |
Google Analytics - user identification. Distinguishes unique visitors. | 2 years | Third-party (Google) |
_gid |
Google Analytics - session tracking. Distinguishes users within a 24-hour window. | 24 hours | Third-party (Google) |
_gat |
Google Analytics - throttle request rate. Limits data collection frequency. | 1 minute | Third-party (Google) |
For full details, see Google's Privacy Policy.
Apollo.io
Apollo.io is a B2B visitor tracking service that helps us understand which companies visit SprintFlint. It collects:
- IP address (used to identify company/organisation)
- Page views and browsing behaviour
- Visitor engagement metrics
Apollo.io may set cookies for visitor tracking and session management. For full details, see Apollo.io's Privacy Policy.
2.3 Third-Party Cookies
The following third-party services may set cookies when you use SprintFlint:
| Service | Purpose | Cookies Set |
|---|---|---|
| Font Awesome CDN | Delivers icon library assets from kit.fontawesome.com | May set cookies for CDN delivery and analytics |
| Stripe | Payment processing during checkout | May set cookies for fraud prevention and session management during payment |
| Sentry | Error monitoring and performance tracking | May set session cookies for error attribution |
3. How We Use Cookies
3.1 Authentication & Security
- Keep you logged in: Session cookies maintain your authenticated state
- CSRF protection: Tokens prevent cross-site request forgery attacks
- Remember me: Database-backed tokens keep you logged in across sessions
3.2 User Experience
- UI preferences: Remember your sidebar collapse state and menu preferences
- Persistent settings: Avoid re-configuring the interface on each visit
- Cookie consent: Remember your cookie preferences so we don't ask every time
3.3 Marketing & Referrals
- Referral tracking: Track who referred you when you sign up via a referral link
- Attribution: Ensure referrers receive credit for successful referrals
3.4 Analytics & Improvement (With Consent)
- Understand usage patterns: See which features teams use most
- Identify bugs: Detect issues through error tracking (Sentry)
- Improve product: Make data-driven decisions about new features
4. Cookie Consent Banner
When you first visit SprintFlint, you'll see a cookie consent banner at the bottom of the screen. You have two options:
4.1 Accept All Cookies
- Essential cookies are enabled (required for the service)
- Analytics cookies are enabled (Google Analytics)
- Your choice is remembered for 365 days
4.2 Essential Only
- Essential cookies are enabled (required for the service)
- Analytics cookies are not loaded
- Google Analytics scripts are blocked
- Your choice is remembered for 365 days
4.3 Changing Your Preferences
You can change your cookie preferences at any time by:
- Clearing the
cookie_consentcookie from your browser - Using your browser's cookie management settings
- The consent banner will reappear on your next visit
5. Google Analytics Details
We use Google Analytics 4 with the following configuration (only when you consent):
- Data collected:
- Page views and navigation paths
- Feature usage (which buttons you click, which pages you visit)
- Session duration and bounce rate
- Browser, device, and operating system information
- Purpose: Understand how teams use SprintFlint, identify popular features, find bugs, and improve the product
6. Sentry Error Monitoring
We use Sentry for error tracking (this is considered essential for service operation):
- Purpose: Capture JavaScript errors, server errors, and performance issues
- Data collected: Error messages, stack traces, browser context, hashed user information
- Cookies: Sentry may set session cookies for error attribution
- Privacy: Sensitive data (passwords, tokens) is automatically filtered from error logs
7. Managing Cookies
7.1 Browser Controls
You can control or delete cookies through your browser settings:
- Chrome: Settings → Privacy and security → Cookies and other site data
- Firefox: Options → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy → Manage Website Data
- Edge: Settings → Cookies and site permissions → Cookies and site data
⚠️ Warning: Disabling essential cookies will break SprintFlint's functionality. You will not be able to log in or use the platform.
7.2 Additional Opt-Out Options
Google Analytics Opt-Out
In addition to choosing "Essential Only" in our consent banner, you can:
- Install the Google Analytics Opt-Out Browser Add-on
- Use browser "Do Not Track" settings
Do Not Track (DNT)
SprintFlint respects browser "Do Not Track" signals. If your browser sends a DNT header:
- We still use essential cookies (required for the service to work)
- We treat this as equivalent to choosing "Essential Only"
7.3 Mobile Devices
If you access SprintFlint from a mobile browser:
- iOS: Settings → Safari → Block All Cookies (warning: may break functionality)
- Android: Chrome → Settings → Site settings → Cookies
8. Data Retention
- Session cookies: Deleted when you close your browser
- Remember me cookies: 2 months (or until you log out)
- Cookie consent: 365 days
- Referral code: 30 days
- UI preference cookies: 365 days (you can delete them anytime)
- Google Analytics cookies: Up to 2 years (_ga) or 24 hours (_gid)
- Google Analytics data: Retained per Google's policy (26 months by default)
9. Security
Our cookies are secured using:
- Secure flag: Cookies are only transmitted over HTTPS in production
- HttpOnly flag: Session cookies cannot be accessed via JavaScript (prevents XSS attacks)
- SameSite attribute: Rails defaults protect against CSRF attacks
- Encryption: Session data is encrypted using Rails' secret key
10. Changes to This Cookie Policy
We may update this Cookie Policy if:
- We add new cookies or third-party services
- We change how we use existing cookies
- Cookie regulations change
When we make changes:
- We will update the "Last Updated" date at the top of this page
- We will notify you via email if changes are significant
- We may reset your cookie consent preference for material changes
We recommend reviewing this Cookie Policy periodically.
11. Third-Party Cookie Policies
For more information about how third-party services use cookies and data:
- Google Analytics: Google Privacy Policy and Google Analytics Cookie Usage
- Google OAuth: Google Privacy Policy (for Sign in with Google)
- Apollo.io: Apollo.io Privacy Policy
- OpenAI: OpenAI Privacy Policy (for AI features)
- Anthropic: Anthropic Privacy Policy (for AI features)
- Font Awesome: Font Awesome Privacy Policy
- Sentry: Sentry Privacy Policy
- Stripe: Stripe Privacy Policy
12. Contact Us
If you have questions about our use of cookies, please contact us:
- Email: [email protected]
- Subject Line: "Cookie Policy Inquiry"
- Address: SprintFlint, Beaumont Drive, Cheltenham, United Kingdom