On this page
This Policy explains how Rahoto uses cookies and similar technologies on this marketing website. It sits alongside our Privacy Policy; where we process personal data on your behalf, the Data Processing Agreement governs that processing.
1. What cookies are
Cookies are small text files a site stores on your device. A
first-party cookie is set by Rahoto; a
third-party cookie is set by another domain. We also treat
equivalent technologies such as localStorage the same way for
consent purposes. We group cookies into four categories below.
2. What we use today
We keep this site deliberately lean. Fonts are self-hosted, and we run no advertising or third-party tracking. We set only strictly-necessary cookies (the cookies the site cannot function without), including the application's authentication and session cookies and the consent-preference cookie this banner creates, plus functional conveniences: a flag the application sets after sign-in, and two items in your browser's own storage for your theme choice and a homepage redirect flag (see section 4). If you opt into Analytics, the site sends anonymous page-view and CTA events to Rahoto without setting an analytics cookie or loading a third-party script. Marketing technology remains unused.
3. Strictly necessary
Always active. These are required to sign you in, keep your session secure, and remember your cookie choice. Because they are essential, they are not subject to consent, but we list them for transparency.
| Cookie | Purpose | Party | Retention |
|---|---|---|---|
rahoto_cookie_consent |
Stores your cookie choices so we don't ask again and so non-essential scripts stay gated. | First-party | 6 months |
| Authentication / session | Signs you in to the Rahoto application and keeps the session secure (set when you use the app). | First-party | Session to short-lived; refresh tokens per plan |
| Security / anti-forgery | Protects forms and authenticated requests against cross-site request forgery. | First-party | Session |
4. Functional / preferences
Cookies that remember non-essential choices to improve your experience.
This marketing site remembers one preference in your browser: the light or
dark theme you pick with the theme switch (kept in localStorage
only when you choose light or dark, not when you leave it on system). It
also uses sessionStorage for a single flag that keeps a tab on
the homepage. Neither is a cookie and neither is sent to us. One functional
cookie is also visible here today:
| Cookie | Purpose | Party | Retention |
|---|---|---|---|
rahoto_session_hint |
A yes/no convenience flag the Rahoto application sets after
you sign in (and clears on sign-out or when your session ends). While
it is present, this site shows "Open app" and "Open Rahoto" instead
of "Sign in" and "Start 14-day trial", and the homepage takes you straight to
your reports. To stay on the homepage, add ?home=1 to
its address; the "Rahoto website" item in the application's account
menu does this. It is not set by this marketing site. Contains no
token, identifier, or personal data; its value is always the constant
1, and the site works without it.
|
First-party (set by the application) | 30 days, or until sign-out |
theme (localStorage) |
Remembers whether you chose the light or dark theme on this site. It
holds only the value light or dark, is
removed when you return to the system setting, and the site works
without it.
|
First-party (browser storage, not sent to us) | Until you change it or clear site data |
rahoto:stay-home (sessionStorage) |
Set to 1 when a signed-in visitor opens the homepage
with ?home=1 or from a link on this site, so the tab
keeps showing the homepage instead of redirecting to their reports. Contains no
identifier or personal data.
|
First-party (browser storage, not sent to us) | Until the browser tab is closed |
5. Analytics
If you opt in through the Analytics toggle, Rahoto records aggregate page
views and selected CTA destinations so we can measure which discovery pages
help readers. The event contains the pathname, the page type, and (after a
relevant link is selected) a controlled destination label such as
signup or documentation. It contains no query
string, form content, session identifier, user ID, organisation ID, IP
address, user agent, or referrer. Do Not Track and Global Privacy Control
signals cause the backend to discard the event. Nothing fires before
consent, and withdrawing consent stops future events.
| Cookie | Purpose | Party | Retention |
|---|---|---|---|
| No analytics cookie | Consent-gated anonymous page-view and CTA events. | First-party Rahoto endpoint | Up to 12 months; no cross-visit identifier is stored |
6. Marketing
Cookies that would support advertising or campaign measurement. None are used today, and we have no plans to track you across sites. If we ever add anything in this category, it would load only after you opt in via the Marketing toggle and would be disclosed here first.
7. Managing and withdrawing consent
On your first visit you can Accept all, Reject non-essential, or Manage preferences to choose categories individually. Analytics and Marketing default to off; we never pre-tick them. You can change or withdraw your choice at any time:
- Select Cookie settings in the site footer to re-open the preference center.
- Withdrawing consent stops the relevant non-essential cookies from loading going forward. You can also clear cookies in your browser settings.
- Strictly-necessary cookies cannot be switched off, as the site would not work without them.
Your choice is stored in the first-party rahoto_cookie_consent
cookie described above. Because non-essential scripts are gated behind your
consent, no analytics or marketing technology runs until you opt in.
8. More information
See our Privacy Policy for how we handle personal data and your rights, and the Data Processing Agreement for processing on your behalf. Questions about cookies: support@rahoto.com.