No tracking. Just sessions.

We use a handful of strictly-necessary cookies to keep you signed in and your forms secure. No analytics cookies, no advertising cookies, no third-party trackers.

Last updated · July 2026

1. What is a cookie

A cookie is a small text file your browser stores when you visit a website. They're used for everything from "remember my language" to "track me across 30 sites for ad targeting". We only use the boring, strictly-necessary kind.

2. What we use

Session cookie

Name: cerberops_session
Purpose: keeps you signed in while you use the dashboard
Lifetime: 2 hours of inactivity, or "remember me" checkbox extends it to 30 days
HTTP-only: yes (JavaScript can't read it)
Secure: yes (only sent over HTTPS)
SameSite: Lax

CSRF cookie

Name: XSRF-TOKEN
Purpose: protects forms from cross-site request forgery attacks
Lifetime: same as session

Impersonation cookie (super-admin only)

Name: impersonator_id (stored in session, not a separate cookie)
Purpose: lets a CerberOps super-admin investigate a customer issue while preserving the ability to return to the original session in one click
Lifetime: only while impersonation is active

All these cookies are strictly necessary and exempt from cookie-consent requirements under ePrivacy & GDPR. We do not show a cookie banner because there's nothing optional to consent to.

3. What we don't use

❌ Google Analytics, Mixpanel, Segment, Amplitude, or any analytics tracker
❌ Advertising cookies (Google Ads, Meta Pixel, etc.)
❌ Heatmap / session replay tools (Hotjar, FullStory)
❌ Third-party A/B testing cookies
❌ Social media tracking pixels
❌ Anything that could profile you across sites

If we ever add an analytics tool, it will be self-hosted (Plausible or PostHog OSS), respect Do-Not-Track, and either work without cookies entirely or be opt-in.

4. Manage cookies

Since we only use strictly-necessary cookies, the only ways to opt out are:

Sign out — clears the session cookie
Browser settings — delete cookies for cerberops.io from your browser's privacy settings
Don't use CerberOps — the application requires the session cookie to function

Questions? duty@cerberops.io