Cookies and browser storage
Effective: 19 October 2026
Every cookie and browser-storage entry Random Assistant uses, and the analytics and error-reporting services that receive data from your browser. We set only strictly necessary cookies, so we show no cookie banner.
1. Cookies
Set by our API (Random Assistant, operated by Random Solutions s.r.o.) when you sign in. All three are strictly necessary for the signed-in service (Art 6(1)(b) GDPR) and are deleted when you sign out.
| Name | Purpose | Attributes | Lifetime |
|---|---|---|---|
app_access | Keeps you signed in | HttpOnly, Secure, SameSite=Lax | One login session (24 hours by default) |
app_refresh | Renews your login without asking for your password again | HttpOnly, Secure, SameSite=Strict | 30 days |
app_csrf | Protects your account against cross-site request forgery | Secure, SameSite=Lax, readable by our page | Same as app_access |
2. Browser storage (local and session storage)
The web app keeps a few settings in your browser so it behaves the way you left it. None of them identifies you to anyone, and none is sent to a third party.
| What | Purpose | Lifetime |
|---|---|---|
Language and theme (ra.lang, ra.theme) | Show the app in your language and colour theme | Until you clear it |
Product tours (ra.tours.*) | Remember which tours you have seen, so they are not shown again | Until you clear it, or until the tab closes |
| View preferences (sort order, selected calendars and CRM, expanded panels) | Keep your views as you left them | Until you clear it |
| Actions in progress (disconnecting an account, returning after connecting one, an onboarding scan, page recovery) | Finish an action you started if the page reloads | Until the action finishes or the tab closes |
Your sign-in token for the app is held in the page's memory only, never in browser storage.
3. Services that receive data from your browser
| Service | Where | Purpose | Data sent | Storage in your browser | Legal basis |
|---|---|---|---|---|---|
| PostHog (PostHog Inc., EU Cloud) | eu.i.posthog.com, Germany | Counting page views on this website and feature use in the app | Page address, referrer, browser, and your IP address with the request; in the app, pseudonymous usage events, never content | None (cookieless, in-memory mode) | Legitimate interest (Art 6(1)(f)). On this website, a Do Not Track or Global Privacy Control signal switches page-view counting off. |
| Sentry (Functional Software Inc., EU data region) | Germany | Finding and fixing errors in the app | Error message, stack trace, browser and operating system, page address; reports carry no request bodies, cookies or user details, and email addresses, tokens and long numbers in error text are masked before a report is sent | None | Legitimate interest (Art 6(1)(f)) |
Both are listed, with their transfer basis, at /legal/processors. You may object to either at any time (Art 21 GDPR): email privacy@random-assistant.com.
4. Consent
We do not show a cookie banner because we set only strictly necessary cookies and store nothing else in your browser beyond the settings above. If that changes, we will ask for your consent first, with “reject” as easy as “accept”.