Convertras
Sign in
Convertras

Cookie policy

Convertras sets two cookies, both strictly necessary. There is no advertising or third-party tracking on this application.

Last updated 18 August 2026 · Stratos Tech LLC

What we set

Convertras uses cookies only to make the application work. There is no advertising network, no cross-site tracking pixel and no third-party analytics script running on it.

convertras_session 2 hours of inactivity

Keeps you signed in and ties your requests to your workspace. Without it you would be logged out on every page.

XSRF-TOKEN Session

Protects forms against cross-site request forgery — it stops another site submitting actions as you.

Both are set with HttpOnly and SameSite protections, and are marked Secure so they are only ever sent over HTTPS.

Why there is no cookie banner

Consent banners exist because most sites set cookies that are not necessary to deliver the service — advertising, profiling, cross-site measurement. Under the ePrivacy rules and the GDPR, strictly necessary cookies do not require consent.

Both of ours are strictly necessary: one keeps you signed in, the other stops a third party acting as you. Neither can be declined without the application ceasing to function, so asking would be a formality rather than a choice. If we ever add a cookie that is not necessary, we will ask first — properly, with a real refusal option — and this page will say so.

Local storage

We store one preference in your browser's local storage rather than a cookie: your light or dark theme choice. It never leaves your device and is not sent to us.

Third parties

Some parts of the product involve other companies, and it is worth being precise about what that means for cookies:

  • Stripe — when you open a checkout or billing portal page, you are on Stripe's own page and Stripe sets its own cookies, including for fraud prevention. Their privacy policy applies there.
  • Fonts — we load a typeface from Bunny Fonts, chosen because it does not set cookies and does not log IP addresses for tracking.
  • The chat widget you embed on your own site — it uses a short-lived token to keep a visitor's conversation together, not to follow them across sites. If you embed it, disclose it in your own cookie notice; that page is yours, not ours.

Controlling cookies

Every browser lets you view and delete cookies. Blocking ours will sign you out and prevent forms from submitting, because they are the mechanism by which the application knows who you are.

Questions: hello@convertras.com. See also the privacy policy.