Cookie Policy
Last Updated: September 2026 • Compliant with EU ePrivacy Directive, GDPR & California CPRA
1. What Are Cookies and Local Storage?
Cookies are small text files that are stored on your computer or mobile device when you visit a website. Local storage and session storage are modern web browser mechanisms that allow web applications to store small amounts of data locally on your device to maintain your session and preferences securely.
At ReplyChat, we prioritize data minimization. We only use cookies and local storage where strictly necessary for system security and session continuity, or where you have granted consent.
Unlike traditional marketing platforms, ReplyChat does NOT use third-party advertising cookies, Facebook Pixel tracking pixels, or cross-site tracking fingerprints.
For aggregate usage insights, we deploy a self-hosted, privacy-preserving analytics engine (Umami) that functions in cookieless mode. It does not collect IP addresses, does not store unique cross-device identifiers, and complies inherently with GDPR and CJEU Planet49 rulings.
2. Categories of Technologies We Use
A. Strictly Necessary Cookies (Essential)
These cookies and tokens are required for the website and dashboard to function. They authenticate your account, secure API communications against CSRF vulnerabilities, and remember whether you have dismissed our cookie banner. These cannot be disabled in our systems.
B. Functional & Preference Technologies
These allow the application to remember choices you make (such as your chosen workspace, active Instagram profile, and language preferences) to provide enhanced personalization.
C. Analytics Technologies
Allows us to count visits and traffic sources so we can measure and improve platform performance. All data is aggregated and anonymized. You can opt out at any time using our Cookie Settings modal.
3. Comprehensive Cookie & Storage Inventory
| Cookie / Key Name | Provider | Category | Purpose | Duration |
|---|---|---|---|---|
| next-auth.session-token / __Secure-next-auth.session-token | ReplyChat (First-Party) | Strictly Necessary | Maintains user authentication and security state across dashboard pages. | 30 days |
| next-auth.csrf-token | ReplyChat (First-Party) | Strictly Necessary | Prevents Cross-Site Request Forgery (CSRF) attacks during authentication requests. | Session |
| replychat_cookie_consent / cookie_consent | ReplyChat (First-Party) | Strictly Necessary | Stores your selected cookie preferences and consent timestamp. | 12 months |
| active_workspace_id | ReplyChat (First-Party / Local Storage) | Functional | Remembers the currently selected workspace and Instagram account context. | Persistent |
| umami.disabled | ReplyChat (First-Party / Local Storage) | Analytics Opt-Out | Signals privacy-friendly analytics script to permanently disable tracking for this browser. | Persistent |
4. Managing Your Cookie Choices
You have the right to decide whether to accept or reject non-essential cookies. You can exercise your preferences at any time by clicking the button below:
5. Managing Cookies via Browser Settings
Most browsers allow you to refuse or delete cookies. The methods for doing so vary from browser to browser. You can find up-to-date information about managing cookies via the following official support links:
6. Inquiries and Contact
For any questions regarding our use of cookies or privacy practices, please contact our Data Protection Team at contact@replychat.app.