Loading
Loading
Last Updated: June 29, 2026
In plain English: Atlaso uses a small number of cookies. Most are the essential ones needed to keep you securely signed in and to make the dashboard work, and we also use Google Analytics 4 — a first-party analytics cookie set via Google's gtag — to understand how visitors use our website and dashboard. On our marketing website only (atlaso.ai — never the dashboard at app.atlaso.ai), we also run one advertising-measurement pixel, from Reddit, so we can tell which Reddit ads bring people to us and whether those campaigns lead to signups. That pixel never loads if you are in the EU, EEA, UK, or Switzerland, and never loads if your browser sends a Global Privacy Control (GPC) signal — if either applies to you, no advertising technology runs and no data about you goes to any ad network, which is why you still see no cookie banner. We also set two small cookies of our own, which are read only by us and never sent to an ad network: one records which campaign you arrived from, and one records a coarse "EU or not" region so we know whether the pixel is allowed to load (see Section 4.5). We do not sell your personal data. We also store one small preference (your light/dark theme choice) in your browser's local storage. You can opt out of analytics through your browser or Google's opt-out add-on (see Section 4). This policy explains what each item is, why it exists, and how you can control it.
This Cookie Policy explains how Atlaso Labs Inc., a Delaware C-Corporation ("Atlaso", "we", "us", or "our"), uses cookies and similar technologies (such as browser local storage) on our website at atlaso.ai and our dashboard at app.atlaso.ai (together, the "Service").
It should be read together with our Privacy Policy, which describes in full how we handle your personal data, and our Terms of Service, which govern your use of the Service. Capitalized terms not defined here have the meaning given to them in those documents.
This policy covers only cookies and similar technologies set in your web browser when you visit our website and dashboard. It does not cover the Atlaso Connectors (Claude Code, Codex, Cursor, Antigravity, OpenCode, Claude Desktop, and MCP) or the Atlaso CLI, which are software you install on your own machine and which do not use browser cookies — those are addressed in the Privacy Policy.
Cookies are small text files that a website places on your device (computer, phone, or tablet) when you visit. They are widely used to make websites work, to remember your settings, and to keep you signed in between pages and visits.
Cookies can be described in a few ways:
Similar technologies include local storage and session storage, which let a website store small amounts of data in your browser. These are not technically "cookies," but we disclose them here for transparency because they serve a comparable purpose. Atlaso uses local storage for a single, non-tracking preference (see Section 4).
Another similar technology is a pixel (also called a tag or beacon): a small piece of code a website loads from another company, which tells that company you visited the page and lets it set its own cookies in your browser. Atlaso loads one such pixel, from Reddit, under the strict limits described in Section 4.5.
Cookies are commonly grouped into the categories below. We tell you plainly which categories apply to Atlaso.
| Category | Used by Atlaso? | What it means |
|---|---|---|
| Strictly necessary | Yes | Required for the Service to function — for example, to keep you securely authenticated and signed in. These cannot be switched off through a consent banner without breaking core functionality. |
| Functional | Yes (local storage only) | Remember choices you make to improve your experience, such as your light/dark theme preference. |
| Analytics / performance | Yes | Measure how visitors use a site. Atlaso uses Google Analytics 4 to understand how visitors use the website and dashboard (see Section 4.3). |
| Advertising / targeting | Yes — one pixel, marketing website only, and never in the EU/EEA/UK/Switzerland or with GPC | Track users across sites to serve and measure ads. Atlaso runs a single Reddit advertising pixel on the marketing website, to measure which Reddit ad campaigns bring visitors and signups and to build ad audiences on Reddit. It never loads on the dashboard, never loads for visitors in the EU/EEA/UK/Switzerland, and never loads when your browser sends a Global Privacy Control signal (see Section 4.5). |
In short: Atlaso uses strictly-necessary authentication cookies, one functional preference stored in local storage, and Google Analytics 4 for aggregate usage measurement. On the marketing website we additionally run one Reddit advertising-measurement pixel — but only for visitors outside the EU/EEA/UK/Switzerland who are not sending a Global Privacy Control signal — plus two first-party cookies of our own that record the campaign you arrived from and which of those two region buckets you fall into. We do not sell your personal data.
The table below lists the cookies and similar technologies present on our Service. Cookie names and exact durations are set by our authentication provider and may change as that provider updates its software; we will keep this list reasonably current.
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
__session | Clerk (our authentication provider) | Maintains your authenticated session so you stay securely signed in to the dashboard and your requests are recognized. | First-party, HTTP cookie | Session / short-lived; refreshed while you are active |
__client_uat | Clerk | A signal used by Clerk to determine your signed-in state and manage session validity. | First-party, HTTP cookie | Persistent (set by Clerk; typically until sign-out or expiry) |
Other Clerk authentication cookies (e.g. __clerk_*) | Clerk | Support secure sign-in, session handling, and protection against session-related abuse. | First-party | Session or short-lived, as set by Clerk |
These cookies are strictly necessary: without them we cannot keep you signed in or operate the dashboard securely. Because they are essential to providing a service you have requested, they do not require consent under EU/UK rules, but we disclose them here for transparency.
For details on how Clerk processes data on our behalf, see our Sub-processors List and Privacy Policy.
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
theme | Atlaso (via the next-themes library) | Remembers your light/dark mode preference so the interface matches your choice on your next visit. | First-party, browser local storage (not a cookie) | Persists in your browser until you clear it |
This preference is stored locally in your browser and is not transmitted to our servers as a cookie. It contains only your display preference and no identifying information.
We use Google Analytics 4 (provided by Google LLC) to understand how visitors use our website and dashboard so we can improve the Service. Google Analytics is loaded via Google's gtag.js and sets the following first-party cookies:
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
_ga | Google LLC (Google Analytics) | Distinguishes unique users/browsers | First-party, set on the .atlaso.ai domain (shared across atlaso.ai and app.atlaso.ai) | Persistent, ~2 years |
_ga_9NX4EF249D | Google LLC (Google Analytics) | Persists GA4 session state for this property | First-party, .atlaso.ai | Persistent, ~2 years |
These are analytics cookies and are not strictly necessary. The data they generate is processed by Google LLC in the United States under the Standard Contractual Clauses and the EU–US Data Privacy Framework (Google is DPF-certified). Google Analytics 4 does not store IP addresses by default. You can opt out of Google Analytics at any time by installing the Google Analytics Opt-out Browser Add-on, or by blocking or deleting these cookies through your browser settings (see Section 8).
We do not set or use:
Aside from the Google Analytics 4 cookies described in Section 4.3 and the advertising measurement described in Section 4.5, we do not use analytics to build advertising profiles or to track you across other websites. If this changes, we will update this policy.
We buy ads on Reddit, and we need to know whether they work — which campaigns bring people to atlaso.ai, and whether those visits turn into signups. This section explains exactly how we measure that, and the limits we put on it.
Where it applies. The advertising pixel and both cookies below are set only on our marketing website at atlaso.ai. No advertising pixel of any kind runs on the dashboard at app.atlaso.ai. The one thing the dashboard does is read our own atl_attr cookie once, at the moment you sign up, because that cookie is shared across atlaso.ai and app.atlaso.ai — see "What happens at signup" below.
The Reddit pixel is triple-gated. It loads only if all three of the following are true:
atl_geo cookie below. If we cannot determine your country, we treat you as being in the EU and load nothing.What Reddit receives, and its role. When the pixel does load, Reddit, Inc. sets its own third-party cookies and identifiers in your browser and receives your visit to that page, together with the technical details any web request carries — such as your IP address and browser type. Reddit uses that to report on our ad campaigns and to build advertising audiences on Reddit. For this processing Reddit acts as an independent controller within its own advertising ecosystem — it is not a sub-processor acting on our instructions — so its handling of that data is governed by Reddit's Privacy Policy.
The full list. The table below covers the cookies Reddit sets through the pixel and the two first-party cookies we set ourselves. Ours are read only by Atlaso, are never sent to Reddit or any other advertising network, and are not used to track you across other websites.
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| Reddit advertising cookies and identifiers | Reddit, Inc. | Set by the Reddit advertising pixel when it is permitted to load (see the three gates above). Let Reddit measure the results of our ad campaigns and build advertising audiences on Reddit. Their names and durations are set by Reddit, not by us — see Reddit's Privacy Policy. | Third-party, set by Reddit | As set by Reddit |
atl_attr | Atlaso | Records how you arrived: the campaign parameters in the link you clicked (utm_source, utm_medium, utm_campaign, utm_content, utm_term), an advertising click identifier if the link carried one (for example Reddit's rdt_cid), the website that referred you, the page you landed on, and a timestamp. If you later create an Account, this lets us attribute that signup to the campaign that brought you. It is set only if you arrive with campaign evidence — a UTM-tagged link, an ad click identifier, or a referral from another website. A direct visit sets nothing. Once set it is never overwritten, so it always reflects your first visit. | First-party, set on .atlaso.ai | Persistent, 90 days |
atl_geo | Atlaso | Records a coarse region classification — eu (EU/EEA/UK/Switzerland) or row (rest of world) — derived from country-level IP geolocation at our hosting edge. Used for one purpose only: to decide whether an advertising pixel may load. No precise location and no IP address is stored in it. | First-party, set on the site you are visiting | Persistent, 180 days |
Note on atl_geo and atl_attr in the EU. Both of these are set by us regardless of where you are — including in the EU/EEA/UK/Switzerland. atl_geo has to be, because it is the mechanism that stops the advertising pixel from loading for you. Neither cookie sends anything to an advertising network.
What happens at signup. If you create an Atlaso Account while the atl_attr cookie is present, we store the campaign details it contains against your Account on our own servers, so we can measure how many signups (and later, subscriptions) a campaign produced. We do not share that record with Reddit or anyone else. See our Privacy Policy for what we store and for how long.
How to avoid it. Blocking third-party cookies in your browser, or using a browser or extension that sends a GPC signal, stops the Reddit pixel. Deleting cookies for atlaso.ai removes atl_attr and atl_geo; arriving without campaign parameters means atl_attr is never set in the first place (see Section 8).
Some of the cookies described above are set by Clerk, the third-party provider we use for authentication and session management. Clerk acts as our service provider (sub-processor) and these cookies are used solely to deliver the Atlaso sign-in and session experience — not for advertising or independent tracking.
Other vendors that help us run the Service — such as Stripe (payments), Vercel (dashboard hosting), Render (backend hosting), Neon (database), and Fireworks AI (AI features for Pro users) — may set their own cookies or use similar technologies when you interact directly with their hosted components (for example, on a Stripe-hosted checkout or billing portal page). Where that happens, those technologies are governed by the respective provider's own cookie and privacy notices. A complete list of our service providers, with links, is available in our Sub-processors List.
Reddit is a different kind of relationship. The advertising pixel described in Section 4.5 is not a service provider acting on our behalf — Reddit decides its own purposes for what it collects through the pixel. It is therefore disclosed here and in our Privacy Policy as an advertising partner and independent controller, and it does not appear in our Sub-processors List.
We use the limited cookies and storage described above only to:
Apart from that advertising measurement, we do not use cookies to build advertising profiles or to track you across other websites, and we do not sell your personal information. Where the Reddit pixel is permitted to load, Reddit may use what it collects for its own advertising purposes, as described in its privacy policy.
Atlaso's authentication and functional cookies are strictly necessary or functional and are exempt from consent because they are essential to providing a service you have actively requested.
We also use Google Analytics 4, which sets analytics cookies that are not strictly necessary. We disclose these cookies in this policy (see Section 4.3) so you have clear, upfront information about what we set and why. Rather than presenting a cookie banner, we give you direct control: you can opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on, or block or delete analytics cookies through your browser settings at any time (see Section 8).
Advertising technologies and the EU/EEA/UK/Switzerland. The rules that require prior consent for advertising cookies apply based on where you are, so we have taken the most straightforward route available to us: we do not load advertising technology there at all. For visitors in the EU, EEA, UK, and Switzerland — and for any visitor whose browser sends a Global Privacy Control signal, wherever they are — the Reddit pixel described in Section 4.5 never loads, no advertising cookie is set, and nothing about the visit is sent to Reddit. If we cannot determine your region, we treat you as being in the EU and load nothing.
The two first-party cookies described in Section 4.5 are set by us in all regions. atl_geo is what enforces the restriction above. atl_attr records the campaign you arrived from, is read only by us, and is never shared with an advertising network. We set out both in full here so you know exactly what is stored and why, and you can block or delete either at any time through your browser (see Section 8).
If we introduce additional non-essential cookies or similar technologies in the future, we will update this Cookie Policy to describe them and, where required by applicable law, provide an appropriate way to exercise your choices.
You are always in control of cookies through your browser settings. You can:
Most major browsers provide instructions here:
Please note: Atlaso's authentication cookies are strictly necessary. If you block or delete them, you will be signed out and may be unable to sign in to or use the dashboard at app.atlaso.ai. Blocking strictly-necessary cookies does not stop the Service from functioning by design — it simply prevents the parts that require a logged-in session from working.
Clearing your browser's local storage will reset your theme preference back to the default but will not otherwise affect your Account or your Memories.
Some browsers offer a "Do Not Track" (DNT) setting or send a Global Privacy Control (GPC) signal. There is no industry-wide standard for how DNT signals should be interpreted.
We honor Global Privacy Control (GPC) as a valid opt-out signal, and we act on it concretely: when your browser sends GPC, the Reddit advertising pixel described in Section 4.5 is not loaded at all. No advertising cookie is set, and nothing about your visit is sent to Reddit. This applies wherever you are and whether or not you have an Account with us.
We do not sell your personal data. Where the pixel is permitted to load — on the marketing website, outside the EU/EEA/UK/Switzerland, with no GPC signal present — page-visit data goes to Reddit for advertising measurement and audience building, and we treat that as "sharing" for cross-context behavioral advertising as the California Consumer Privacy Act (CCPA/CPRA) uses that term. Honoring GPC is what switches it off. There is no advertising technology on the dashboard at app.atlaso.ai in any region, and we do not track you across other websites for our own purposes.
For more on your privacy rights, including under the CCPA/CPRA and other laws, please see our Privacy Policy.
We may update this Cookie Policy from time to time — for example, if we add new functionality, change service providers, or are required to do so by law. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, provide additional notice. We encourage you to review this page periodically.
If you have questions about this Cookie Policy or our use of cookies, please contact us:
Atlaso Labs Inc., a Delaware C-Corporation.
For more on how we handle your personal data, see our Privacy Policy. For the full list of our service providers, see our Sub-processors List.