1. Introduction
This Cookie Policy explains how ExactlyHow, Inc. ("we", "us") uses cookies and similar technologies on exactlyhow.io and in the ExactlyHow application. It should be read with our Privacy Policy.
2. What Cookies Are
Cookies are small text files stored on your device. We also use similar technologies such as local storage. These help the Services function, keep you signed in, remember settings, and diagnose errors.
3. Essential Cookies
Essential cookies are required to provide the Services. They include session and security cookies that let the application load, route you to the right workspace, and prevent basic abuse. You cannot turn these off in the product without breaking sign-in and core features.
4. Authentication Cookies
We store authentication session data in first-party cookies so you stay signed in across exactlyhow.io, app.exactlyhow.io, and your organization's workspace subdomain. These cookies are scoped to the exactlyhow.io domain, so they are sent to every ExactlyHow subdomain. They are marked Secure and SameSite, and they last for the length of your session (they are renewed while you stay signed in). They are needed to enforce role-based access.
5. Security Cookies
Security-related cookies and tokens help us authenticate requests and reduce unauthorized access. They are not used to advertise to you.
6. Analytics Cookies
We do not run a third-party marketing analytics or advertising pixel on the marketing site or in the application. We may record first-party product events and error diagnostics needed to operate the Services. In the signed-in application, Sentry may record a masked session replay of a small share of sessions, and of sessions in which an error occurs, to help us fix bugs. Replays mask all text and block images, video, and other media, so what you type and read is not captured. We do not use cookies to build advertising profiles.
7. Preference Cookies
We store your light or dark theme choice in a first-party cookie (shared across our subdomains so the theme matches everywhere) and in local storage. The application also sets a cookie that remembers whether the navigation sidebar is open or collapsed, and stores view and filter choices (for example in My Processes) in local storage. These settings stay on your browser unless you clear site data.
8. Third Party Cookies
Some providers that help us run the Services may set their own cookies or similar identifiers when their code runs in your browser. Today that includes:
- Supabase — authentication and API access for the application.
- Sentry — error monitoring, diagnostics, and masked session replay in the application.
- Stripe — checkout and billing when an organization pays for Business. Stripe may set cookies needed to complete payment. ExactlyHow does not store the card number. If you pay with Apple Pay or Google Pay, those wallet providers take part in the payment through Stripe.
- Google and Microsoft — only if you choose to sign in with your Google or Microsoft account. They may set cookies on their own sign-in pages.
Those providers process information under their own policies. A list of subprocessors is on our Privacy & Legal page.
9. Cookie Retention
Session cookies expire when you sign out or the session ends. The theme cookie lasts up to one year. Other persistent cookies and local storage remain until they expire or you delete them. Authentication cookies are kept only as long as needed to keep a valid session.
10. Browser Controls
You can block or delete cookies in your browser. If you block essential or authentication cookies, you will not be able to sign in or use the application.
11. Consent Management
We currently use cookies and similar technologies that are necessary to operate the Services. We do not present a separate cookie-preference banner because we do not use non-essential advertising or marketing-analytics cookies. If we later add optional cookies that require consent in your region, we will provide a way to manage them and update this policy.
12. Do Not Track
Browsers may send a "Do Not Track" signal. There is no consistent industry standard for responding to it, and our sites do not change behavior based on that signal.
13. Updates
We may update this Cookie Policy when our technologies or the law change. The "Last Updated" date at the top will change when we do.
