Cookie Policy
Last updated: August 9, 2026
This policy covers cookies and equivalent browser storage (localStorage) used
by the SolidPing marketing website (www.solidping.io) and by the SolidPing
hosted dashboard. It complements the Privacy Policy.
Under Article 5(3) of the ePrivacy Directive and the CNIL's guidance, storing or reading information on your device requires your consent — except where it is strictly necessary to provide a service you explicitly requested. Everything we place on your device is listed below, with which of the two it is.
The short version
- This marketing site sets no cookies at all. No analytics, no advertising, no tracking pixels, no third-party embeds that phone home. It stores one browser preference locally, which never leaves your device.
- The dashboard sets only what is needed to keep you signed in, plus one interface preference.
- Product analytics are optional, disabled unless the deployment enables them, exempt from consent only where they meet the CNIL's audience-measurement criteria, and refusable — see Refusing analytics.
- We run no advertising cookies and no cross-site tracking, on any surface.
Marketing website — www.solidping.io
| Name | Type | Purpose | Duration |
|---|---|---|---|
theme | localStorage | Remembers your light/dark preference so the site does not flash the wrong theme on load. Never sent to a server. | Until you clear browser storage |
The site is a static build served from GitHub Pages. GitHub records visitors' IP addresses in its server logs for delivery and security purposes; we do not have access to those logs and we do not use them.
Hosted dashboard
Strictly necessary — no consent required
| Name | Type | Purpose | Duration |
|---|---|---|---|
access_token | Cookie | Carries your session so server-rendered and cookie-authenticated flows (notably the OAuth authorisation and consent screens) recognise you without a redirect bounce. | Matches the access-token lifetime; cleared on sign-out |
solidping_session_token | localStorage | The access token used by the dashboard's API calls. | Until sign-out |
solidping_refresh_token | localStorage | Renews your session without making you sign in repeatedly. | Until sign-out or expiry |
solidping_expires_at, solidping_expires_in | localStorage | When the current token expires, so the dashboard refreshes it before it lapses. | Until sign-out |
solidping_org | localStorage | The organisation you are currently working in, so a reload lands you back in the right place. | Until sign-out |
solidping_last_auth_method | localStorage | Remembers which sign-in method you used last, so the login page offers it first. | Until you clear browser storage |
Functional preference
| Name | Type | Purpose | Duration |
|---|---|---|---|
sidebar_state | Cookie | Whether the navigation sidebar is expanded or collapsed. | 7 days |
This one is a convenience rather than a strict necessity. It holds a single boolean, is not used to identify or track you, and is not shared with anyone.
Product analytics — optional, off by default
Where the deployment has PostHog configured, the dashboard loads PostHog to understand which features are used. It is genuinely optional: with no PostHog credentials configured, the analytics code is never downloaded and no request is made to any analytics host — there is no analytics script tag in the page.
| Name | Type | Purpose | Duration |
|---|---|---|---|
ph_*_posthog | Cookie / localStorage | PostHog's own identifier and event queue. | Up to 12 months |
How it is constrained:
- Pseudonymous identifier. You are identified to PostHog by a value derived from your organisation and user UUIDs — never your email, name, or IP-derived identity.
- No session recording. Session replay is disabled outright.
- Masked capture. All typed input values and element attributes are masked; captured text is masked.
- Sanitised URLs. SolidPing URLs contain organisation slugs and resource
IDs, so every URL and pathname is rewritten to a route template
(
/orgs/:org/checks/:id) before it leaves your browser. - Person profiles only for identified users, not for anonymous visitors.
- EU hosting. Events go to PostHog's EU instance (Frankfurt).
Refusing analytics
Any of these works:
- Do Not Track / Global Privacy Control — enable it in your browser; we honour it.
- Sign out — analytics are only initialised for a signed-in dashboard session.
- Block the request — any content blocker that blocks PostHog stops it. The dashboard is written so a blocked or failed analytics chunk can never break it.
- Ask us — email contact@solidping.io to have analytics disabled for your organisation.
Where applicable law requires prior consent for these cookies, they are set only after that consent is given, and refusing has no effect on your ability to use the Service.
Cookies we do not use
For the avoidance of doubt, on any SolidPing surface we operate: no advertising or retargeting cookies, no social-media tracking pixels, no cross-site identifiers, no fingerprinting, no data brokers, and no sale of any data derived from cookies.
Third-party pages you may reach
Clicking through to Slack, Discord, GitHub, or any other third-party site takes you to their property, under their cookie policy. The "Add to Slack" button on our Slack page is a static image linking to our own install endpoint — it does not load a tracker.
Self-hosted SolidPing
If you run SolidPing yourself, the strictly-necessary session storage above still applies, because it is part of how the software works. Everything else is your choice: analytics are off unless you configure a PostHog key, and no data reaches us either way. You are the controller of your deployment and responsible for your own cookie notice — see Self-hosting & GDPR.
Managing cookies in your browser
You can delete or block cookies and clear local storage from your browser settings (Chrome, Firefox, Safari, and Edge all expose this under privacy settings). Blocking the strictly-necessary items above will sign you out and prevent the dashboard from working.
Changes
Changes to this policy are published on this page with an updated date. Adding any new non-essential cookie is announced before it ships.
Questions: contact@solidping.io.