Cookie policy
We use only the cookies needed to operate the service and understand how it's being used — never for advertising or cross-site tracking.
1. What's a cookie?
A cookie is a small text file that a website stores on your device through your browser. They let sites remember things between page loads — like that you're signed in, or which timezone to display dates in. Some are essential to making a site function; others are used for tracking. We only use the essential kind.
2. Categories of cookies we may use
We group every cookie into one of four categories. The first two are how the service works; the second two are how we understand and improve it.
Strictly necessary
Required for the site or application to function. You can't opt out of these without breaking the experience. Examples include session identifiers, CSRF protection tokens, and authentication cookies.
On the marketing site, these are typically PHP session cookies used by forms (contact, waitlist, etc.) to validate submissions and prevent duplicates. On the application, they include the encrypted authentication cookie that keeps you signed in (set HttpOnly, Secure, SameSite=Lax) and a CSRF token required to submit forms.
Functional
Remember choices you've made — UI preferences (timezone, dark mode, sidebar state), language, dismissed banners, accepted cookie notices, and similar. These don't identify you across sites; they just keep your settings sticky between visits. We may add or remove specific functional cookies as we ship features, without re-issuing this policy.
Analytics & performance
Help us understand how the marketing site and application are used in aggregate — which pages are popular, where users get stuck, how fast pages load, what's broken. We may use first-party analytics (counts and aggregate trends) and privacy-respecting third-party tools that don't fingerprint, share data with ad networks, or build cross-site profiles. If we use cookies for analytics, they're set on our own domains and are not sold or used for advertising.
Advertising & cross-site tracking
None. Ever. We do not load advertising pixels, retargeting tags, social-network beacons, or any cookie that profiles you across the web for marketing purposes. This is a deliberate, durable commitment — not a temporary state we'd quietly change.
3. Where cookies are set
Marketing site (anyping.com) — strictly necessary cookies for forms; functional cookies if you've expressed a preference (e.g. theme); analytics cookies for aggregate usage understanding.
Application (app.anyping.com) — strictly necessary cookies (authentication, CSRF); functional cookies (UI preferences, persistent for up to 1 year); analytics cookies for product improvement.
Status pages (status.anyping.com and custom domains) — minimal by default. Public status pages don't track visitors. If a visitor subscribes to incident notifications, the subscription is managed via a token in the email link, not a tracking cookie.
4. Third-party cookies
The marketing site does not embed third-party advertising or social-tracking cookies. Where we use third-party services that set their own cookies, it's limited to:
- Stripe — sets cookies on its own checkout pages when you're entering billing details, governed by Stripe's cookie policy.
- Privacy-respecting analytics or error monitoring — if we use any, we'll only choose providers that don't combine our visitor data with cross-site advertising profiles.
- Embedded video or documentation — if we embed third-party content (e.g. a how-to video), the embedded provider may set their own cookies. We use privacy-enhanced embeds where the option exists.
5. How to opt out
You can clear or block cookies in your browser at any time. Doing so will:
- Sign you out of the application (you'll need to sign back in).
- Reset any UI preferences you've set.
- Require you to re-submit any in-progress forms.
- Reset analytics — we won't be able to recognise you as a returning anonymous visitor for aggregate stats.
The marketing site will continue to work without cookies; specific application features that require sign-in will not.
If you'd like to opt out of analytics specifically while still using the application, contact privacy@anyping.com.
6. Do Not Track & Global Privacy Control
We honour Global Privacy Control (GPC) signals where applicable. We don't sell your data or use cross-site tracking, so most opt-out signals don't change much for us — but we still respect them.
7. Changes to this policy
We may update this policy from time to time as we add new tools or features. Material changes — for example, introducing a new category of cookies or a new third-party provider that processes personal data — will be highlighted on the page and, where you have an account, communicated by email. Routine changes (re-categorising a cookie, adding or removing individual cookies within an existing category, clarifying language) may be made without notice. The "Last updated" date at the top always reflects the most recent change.
8. Contact
Questions: privacy@anyping.com.